Attempts to verify the data by trying to create new accounts using usernames in the dump resulted in messages that the tested usernames were already taken. The 1-million record sample was to alert the public that the data were out there, but he claimed that the full data set has approximately 20 million records.ĭata in the dump were dated from 2014, which would be consistent with the incident reported in September, 2014 by Bin Weevils. “Luke Baxter” allegedly informed him that they were reserving the full data set with the email addresses and IP addresses as they might sell all of the data privately at some future time. Screenshot provided by hacker indicates that they obtained more information than acknowledged by Bin Weevils in their 2014 notification. User data from a 2014 hack of Bin Weevils is now appearing on the web. In response, they provided a redacted screenshot showing all of the fields, which did include both registration and login IP addresses, as well as email addresses. ShohidzIslam informed that he asked the hackers if they also had IP addresses and email addresses. A line at the top of the dump credits “jkb, legit, lukebaxter, tyrone, philip, pure, akshay.” Each record included the user’s username, encrypted password (salt+hash), and in-game data like their pet’s ID number, pet’s name, and date of registration. The file, which obtained and inspected, consisted of 1,022,883 records. Yesterday, was contacted by “ShohidzIslam,” who wrote that he had learned of a database that was now being released to the public by hackers going by the names of “Pure”, “LukeBaxter”, “Akshay”, “Tyrone” and “Philip.” A link to the data had reportedly been posted in an IRC chat.

And based on data provided to yesterday and today, they did not fully disclose the types of information that were hacked. Their note does not seem to inform users that the data were actually hacked and acquired.

In response, they forced a password reset and added some unspecified security features. In September 2014, Bin Weevils posted a note on their site that they had discovered a “vulnerability” affecting usernames and passwords. This time it’s Bin Weevils, a British online children’s game, owned by 55 Pixels. We’ve seen it before – in fact, we seem to be seeing it a lot recently – data from an old hack first being publicly leaked.