August 24th, 2016

Table of Contents

• About Us
• Summary
• Passwords

About Us

LeakedSource is already the best data breach monitoring service in the world and this batch of data pushes us over 2 billion records making us by far the largest as well. We're not done adding data either. Expect lots more breaches to be exposed including some in the crypto currency space.

We have already helped multiple companies secure their users with our API which provides cracked plaintext passwords from all 2 billion records for businesses to compare against their own users and forcibly change affected passwords. If you're interested in using our services, contact us about an API key.

Any journalists that want to get notified about breaches, DM us on Twitter with your email address.

Summary

Subdomains belonging to mail.ru were hacked in August of 2016.

Specifically they are:

• cfire.mail.ru - 12,881,787 users, 6,226,196 passwords cracked at the time of this post.
• parapa.mail.ru (main game) - 5,029,530 users, 3,329,532 passwords cracked at the time of this post.
• parapa.mail.ru (forums) - 3,986,234 users, 2,907,572 passwords cracked at the time of this post.
• tanks.mail.ru - 3,236,254 users, 0 passwords cracked at the time of this post.

We have so much data that we're also adding multiple other databases at the same time, a full list is below:

• expertlaw.com - 190,938 users, 127,073 passwords cracked at the time of this post.
• ageofconan.com - 433,662 users, 396,394 passwords cracked at the time of this post.
• anarchy-online.com - 75,514 users, 21,775 passwords cracked at the time of this post.
• freeadvice.com - 487,584 users, 246,958 passwords cracked at the time of this post.
• gamesforum.com - 109,135 users, 46,758 passwords cracked at the time of this post.
• longestjourney.com - 11,951 users, 6,782 passwords cracked at the time of this post.
• ppcgeeks.com - 490,004 users, 257,542 passwords cracked at the time of this post.
• thesecretworld.com (EN) - 227,956 users, 81,001 passwords cracked at the time of this post.
• thesecretworld.com (FR) - 143,935 users, 34,676 passwords cracked at the time of this post.
• thesecretworld.com (DE) - 144,604 users, 35,166 passwords cracked at the time of this post.

Anyone may use any information on this page for free provided LeakedSource is given credit and a direct link back.

You may search for yourself any of the leaked databases by visiting our homepage.

Passwords

Not a single website used proper password storage, they all used some variation of MD5 with or without unique salts.

We thought the passwords used by the *.mail.ru communities were comical so here is their top 50