ILikeCheats Data Breach (2014): What Was Exposed & What To Do

In October 2014, the ILikeCheats website suffered a data breach that exposed 189,000 user accounts. The incident, reported on October 18, 2014, involved the leakage of usernames, email addresses, IP addresses, and password hashes stored as weak MD5 values from the site's vBulletin forum. The data later appeared in public breach repositories with assistance from dehashed.com. Older incidents of this kind remain relevant because credentials and contact details from forums frequently circulate for years, contributing to credential-stuffing campaigns and targeted phishing that continue to affect users today.

What happened

The breach occurred at ILikeCheats, a website offering game cheats that operated a vBulletin-based discussion forum. In October 2014 the forum's user database was accessed without authorization, resulting in the exposure of 189,000 accounts. The compromised records included usernames, email addresses, IP addresses, and MD5-hashed passwords. No further technical details about the method of access or the exact date of the intrusion have been disclosed in public reports.

How a breach like this happens

Forum platforms built on older software such as vBulletin have historically been targeted through unpatched vulnerabilities, weak authentication mechanisms, or compromised administrative credentials. Once an attacker gains entry to the database, they can extract user tables that store login details and contact information. Passwords protected only by unsalted or weakly hashed algorithms like MD5 are especially susceptible to offline cracking, allowing reuse of the same credentials across other sites.

About ILikeCheats

ILikeCheats operated as an online community centered on game modification and cheat resources. Sites in this sector typically maintain user accounts to support discussion forums, downloads, and membership features. The data held by such platforms usually consists of basic registration information rather than financial or highly sensitive personal records, yet the volume of accounts can still create meaningful exposure when a breach occurs.

What data was at risk

The records confirmed as exposed contained usernames, email addresses, IP addresses, and passwords stored as MD5 hashes. Public reporting does not specify whether additional fields such as private messages or payment details were included. Organizations of this type commonly retain only the minimal data needed for forum operation, but the precise scope of the ILikeCheats dataset remains limited to the four categories listed above.

The real-world impact

Exposed email addresses and usernames can be used for phishing or to map user activity across other services. IP addresses may assist in geolocation or correlation with other online behavior. Because the passwords were stored as weak MD5 hashes, some are likely to have been recovered and tested against accounts on unrelated platforms, increasing the chance of unauthorized access where users reused credentials. For the organization, the incident represents a loss of user trust and potential regulatory scrutiny common to any site holding account data.

Were you affected?

Individuals who created accounts on ILikeCheats before October 2014 should assume their information may be present in the exposed set. Practical first steps include changing passwords on any site where the same credentials were used and enabling multi-factor authentication. Readers can also submit their email address to a free exposure scan service that checks against known breach datasets to determine whether their details have appeared in this or other incidents.

AICompiled with AI assistance from public sources and published under our editorial standards.