Created by Markus “Notch” Persson and developed by Mojang Studios, Minecraft has over 212 million monthly active players, and now the players’ data surfaced in an alleged 18 million breach
Two posts on underground cybercrime forums claim that Minecraft players’ data has been breached. One threat actor says 18 million user records are for sale, while another post cites a more modest 9 million records.
Cybernews researchers investigated the claims, and here is what was found:
- Supposedly, different datasets appear to be the same 1,000 records.
- The sample contains usernames, email addresses, and, in some cases, password hashes.
- The records also appear to have been collected from specific Minecraft servers, with only 3 unique servers appearing across the sample.
- Information could be used for credential stuffing and social engineering scams, particularly if email addresses are paired with passwords victims have reused elsewhere.
The team found that email addresses in the sample appear in Have I Been Pwned and are referenced in multiple infostealer combo lists. This suggests that the data source may be infostealer malware.
For more information, read the article here:
https://cybernews.com/security/minecraft-players-data-breach
Related
This entry was posted on October 2, 2026 at 8:53 am and is filed under Commentary with tags Cybernews. You can follow any responses to this entry through the RSS 2.0 feed.
You can leave a response, or trackback from your own site.
Nearly 20 million Minecraft player records are allegedly for sale
Created by Markus “Notch” Persson and developed by Mojang Studios, Minecraft has over 212 million monthly active players, and now the players’ data surfaced in an alleged 18 million breach
Two posts on underground cybercrime forums claim that Minecraft players’ data has been breached. One threat actor says 18 million user records are for sale, while another post cites a more modest 9 million records.
Cybernews researchers investigated the claims, and here is what was found:
The team found that email addresses in the sample appear in Have I Been Pwned and are referenced in multiple infostealer combo lists. This suggests that the data source may be infostealer malware.
For more information, read the article here:
https://cybernews.com/security/minecraft-players-data-breach
Share this:
Like this:
Related
This entry was posted on October 2, 2026 at 8:53 am and is filed under Commentary with tags Cybernews. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.