Back to Radar
SU

SubaGames

High

A breach of SubaGames in 2016 exposed data of over 6 million users, with much of it unlawfully deciphered.

Records exposed
6,137,666 records
Breach date
Breach Nov 1, 2016
Last update
Updated Aug 25, 2021

What data was exposed?

Fields reported as compromised in this breach record.

Email addressesPasswordsUsernames

Why does this breach matter?

In-depth analysis of the breach and its implications.

In November 2016, SubaGames, a game developer, experienced a significant data breach that resulted in the exposure of sensitive user data including email addresses, usernames, and passwords. These records, consisting of 6.1 million unique entries, were initially safeguarded using salted MD5 hashing. However, a significant portion was subsequently cracked and circulated in plaintext form within illicit forums. The breach was documented and made publicly available by dehashed.com and recorded in the Have I Been Pwned database.

Impact Analysis

Understanding the scope and consequences of this breach.

User Impact
Individuals were at heightened risk of phishing, credential stuffing, and identity theft.
Business Impact
Significant reputational damage and potential fines for non-compliance with data protection laws of affected regions.
Affected Sectors
  • Gaming
  • Technology
Geographic Impact
  • Global

What You Should Do

Recommended actions to take in response to this breach.

If You Were Affected

  • Change your password on any service using the same or similar credentials.
  • Enable two-factor authentication on all accounts if available.
  • Monitor email and associated accounts for suspicious activities.
  • Watch for phishing attempts pretending to be SubaGames' correspondence.

Preventive Measures

  • Create a unique, strong password for every service.
  • Adopt reputable password management tools.
  • Ensure websites utilize advanced hashing and encryption practices.
  • Companies should conduct regular security audits and penetration testing.

Frequently Asked Questions

Common questions about this breach and what it means for you.

Reports indicate that many passwords in this breach were deciphered into plaintext after being initially hashed.