Open CS:GO data breach: 512K accounts exposed
Severity: medium · Patch status: no-fix-needed · Since 2018-01-15
In December 2017, the website for purchasing Counter-Strike skins known as Open CS:GO (Counter-Strike: Global Offensive) suffered a data breach (address since redirects to dropgun.com). The 10GB file contained an extensive amount of personal information including email and IP addresses, phone numbers, physical addresses and purchase histories. Numerous attempts were made to contact Open CS:GO about the incident, however no responses were received. Exposed data: avatars, email addresses, ip addresses, phone numbers, physical addresses, purchases, social media profiles, usernames. The breach dates from Nov 28, 2017; Have I Been Pwned loaded it on Jan 15, 2018.
What to do
- If you had a Open CS:GO account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch
