Evony.com Data Breach: What Happened in June 2016?

In June 2016, Evony.com, a popular online multiplayer game, suffered a major data breach that affected more than 17.8 million player accounts. The incident brought to light serious vulnerabilities in Evony's security practices. Attackers managed to access and exfiltrate a vast trove of player data, including usernames, email addresses, hashed passwords (using MD5), IP addresses, and some social data. For many fans and users of Evony, the breach was an unsettling reminder of the risks involved in storing personal information on gaming platforms.

What Information Was Exposed?

The Evony data breach exposed several types of sensitive information. The compromised data included player usernames, email addresses, IP addresses, MD5-hashed passwords, and additional social data. While MD5 hashes provide a basic form of password security, this hashing algorithm is widely considered to be outdated and vulnerable to attacks. The leaked IP addresses could also reveal geographical locations of the users involved.

How Many Accounts Were Impacted?

According to reports, the breach affected a total of 17,857,473 unique Evony player accounts. Every affected user had at least their username, hashed password, and email address included in the leaked dataset, with some records also containing IP addresses and social connectivity information linked to gameplay.

Timeline of the Evony.com Breach

The breach occurred in early June 2016, when attackers gained unauthorized access to Evony's database. Details about how the attackers infiltrated the system have not been widely released, but the incident underscores the importance of strong security protocols for online platforms. It was only after investigators examined the scope of the attack that the extent of user data exposure became clear.

Scope and Aftermath

The stolen data set represented current and former users spanning across Evony’s global player base. The inclusion of email addresses and IP information raised additional privacy concerns for affected players. Following the breach, questions regarding the security of cloud-based gaming environments gained new prominence.

Frequently Asked Questions About the Evony.com Breach

How many users were affected by the Evony.com breach in 2016?

The data breach impacted more than 17.8 million unique Evony.com accounts, putting players’ usernames, email addresses, hashed passwords, and IP addresses at risk.

What data was leaked in the Evony breach?

The leaked data set included usernames, email addresses, MD5-hashed passwords, IP addresses, and some associated social information.

When did the Evony.com data breach happen?

The breach occurred in June 2016, with unauthorized access reportedly taking place around June 1st of that year.

How did the Evony.com breach happen?

Attackers gained unauthorized access to Evony’s user database. The specific technical vulnerabilities exploited have not been fully detailed, but the attackers obtained sensitive user information stored within Evony’s systems.

How can I check if I'm in the Evony.com breach?

You can check if your information was part of the Evony.com breach by utilizing the DeHashed search engine.