Warmane data breach: 1.1M accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2018-09-08
In approximately December 2016, the online service for World of Warcraft private servers Warmane suffered a data breach. The incident exposed over 1.1M accounts including usernames, email addresses, dates of birth and salted MD5 password hashes. The data was subsequently extensively circulated online and was later provided to HIBP by whitehat security researcher and data analyst Adam Davies. Exposed data: dates of birth, email addresses, passwords, usernames. The breach dates from Dec 1, 2016; Have I Been Pwned loaded it on Sep 8, 2018.
What to do
- If you had a Warmane account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch
