Coupon Mom / Armor Games Data Breach (2014): What Was Exposed & What To Do

Breaking down the breach

A file containing 11 million email addresses and passwords in plain text was created in 2014 and initially presented as data from Coupon Mom. Further review indicated the file also contained indicators pointing to Armor Games. When the organizations were notified, each confirmed that the records did not match their full customer bases and that the file may incorporate data from additional sources sharing common subscribers.

The incident was reported on February 8, 2014. No information has been released about the method of access, the precise date of any intrusion, or the total number of unique individuals affected beyond the 11 million records listed.

How a breach like this happens

Incidents involving large sets of email addresses and passwords often begin with unauthorized access to an online service’s user database. Once inside, an attacker can copy stored account information. When passwords are kept in plain text rather than hashed, they can be read directly from the copied files.

Files containing such data sometimes circulate after the initial access. They may later be combined with records from other sources, which can complicate efforts to determine the original point of compromise.

About Coupon Mom / Armor Games

Coupon Mom operated as a website offering coupons and deals, while Armor Games provided online games. Both services required users to create accounts, which typically included an email address and a password for login and account recovery.

Organizations that maintain large user bases hold contact details and authentication credentials that can be targeted for misuse if obtained without authorization. A breach at either service therefore carries consequences for account security on other platforms where the same credentials may have been reused.

What was likely exposed

The file reported in 2014 is described as containing email addresses and passwords stored in plain text. Verification with individuals who had previously used those passwords on other sites showed that many had accounts at Coupon Mom or Armor Games.

The organizations stated that the data did not represent their complete customer records. The precise contents of the file, including whether additional fields were present, have not been publicly confirmed.

What's at stake

Individuals whose email addresses and passwords appear in the file may encounter attempts to access accounts on other services if they reused those credentials. Plain-text storage increases the immediate usability of the passwords for anyone who obtains the file.

For the organizations, the incident highlights gaps in how user data was protected and stored at the time. Mixed records can also make it harder for affected people to know which service originally held their information.

What to do if you're exposed

Review account activity on any service where the same email and password combination may have been used. Change passwords to unique values for each important account and enable any available multi-factor authentication options.

• Check recent login records on email, banking, and shopping accounts.
• Replace reused passwords with distinct ones generated by a password manager.
• Run a free exposure scan using your email address on Have I Been Pwned to see whether the address appears in known breach data sets.

AICompiled with AI assistance from public sources and published under our editorial standards.