Breach: Warmane
Date of breach: 1 Dec 2016
Number of accounts: 1,116,256
Compromised data: Dates of birth, Email addresses, Passwords, Usernames
In approximately December 2016, the online service for World of Warcraft private servers Warmane suffered a data breach. The incident exposed over 1.1M accounts including usernames, email addresses, dates of birth and salted MD5 password hashes. The data was subsequently extensively circulated online and was later provided to HIBP by whitehat security researcher and data analyst Adam Davies.
-
Wondering why we werent told about this? Couldn't you at least inform us to change our psw etc? I know it's a private server and all, but still..
This is outdated information and this breach has been addressed on every possible level. It was not a breach on our side but rather the forum system we use. Every major forum that used the same system was vulnerable. This was widely known. No breach on our services has been made, just the underlying forum system. No passwords were ever leaked. We mitigated this with our expiry system and the information accounts currently have is nothing alike back then.