BlankMediaGames Data Breach (2018): What Was Exposed & What To Do

In December 2018, a data breach at the Town of Salem website operated by BlankMediaGames exposed records belonging to 7.6 million users. The incident was reported publicly on December 28, 2018, after the data set surfaced and was submitted to Have I Been Pwned by the service DeHashed. For individuals whose information appeared in the data, the exposure created the possibility that email addresses, usernames, and password hashes could be used in further attacks or sold on underground forums.

The practical stakes center on the reuse of credentials. When passwords are stored as hashes and paired with email addresses, attackers can attempt to crack them offline and test the combinations against other online accounts. Users who relied on the same password elsewhere face an elevated risk of account takeover even if they take no further action.

Inside the incident

The breach involved the Town of Salem website. Public reporting states that the data set contained 7.6 million unique email addresses along with usernames, IP addresses, purchase histories, and passwords stored as phpass hashes. Browser user agent details and records of website activity were also listed among the exposed fields. The date the data was first accessed by unauthorized parties remains undisclosed. DeHashed reported making multiple contact attempts to BlankMediaGames through various channels over several days without receiving a response at the time of publication.

How a breach like this happens

Incidents affecting online service databases commonly begin with an attacker obtaining unauthorized access to a web application or its supporting infrastructure. This access may occur through unpatched software, weak authentication controls, or compromised administrative credentials. Once inside, the attacker can copy tables containing user records. In many cases the data is later posted or sold, after which third-party researchers discover and report the exposure. The precise method used against BlankMediaGames has not been disclosed.

About BlankMediaGames

BlankMediaGames develops and operates the multiplayer game Town of Salem. Organizations in the online gaming sector routinely maintain accounts that include email addresses, usernames, and transaction histories so they can manage logins, process purchases, and communicate with players. A breach at such a service is consequential because the data can be used to target large numbers of individuals who may also hold accounts on unrelated platforms.

What was likely exposed

The data set reported in connection with the incident included the following categories of information:

• Browser user agent details
• Email addresses
• IP addresses
• Passwords stored as phpass hashes
• Purchase histories
• Usernames
• Website activity records

Whether additional fields were present is not confirmed in available reporting.

What's at stake

For affected individuals, the main concrete risks involve credential stuffing and targeted phishing. Email addresses paired with cracked passwords can be used to attempt access to other services. IP addresses and activity logs may allow inference of approximate locations or usage patterns. For the organization, the incident creates potential regulatory, reputational, and operational consequences, though the scale of any follow-on impact has not been publicly detailed.

Were you affected?

Individuals can check whether their email address appears in known breach data sets by using publicly available exposure search tools. If a match is found, the recommended first steps are to change the password on the affected account and on any other service where the same password was used, and to enable multi-factor authentication where available. Monitoring for unusual login attempts on linked accounts is also prudent.

AICompiled with AI assistance from public sources and published under our editorial standards.