Lanwar Data Breach (2018): What Was Exposed & What To Do

Breaking down the breach

The breach was identified internally in July 2018. Lanwar staff stated they believed the intrusion dated back several months prior to discovery. The dataset contained records for 45,000 individuals. A staff member submitted the incident to Have I Been Pwned and notified relevant authorities after observing a phishing attempt that sought Bitcoin from one user. No further details on the method of initial access or the precise timeline have been made public.

How a breach like this happens

Incidents involving gaming or online community platforms often begin with the compromise of a web application, server, or third-party service that stores user account data. Attackers may exploit unpatched software, weak authentication controls or stolen credentials from other sites to gain entry. Once inside, they can extract databases containing account details. Passwords stored without hashing or encryption are particularly valuable because they can be used directly for further account takeovers or sold on underground markets.

Who is Lanwar?

Lanwar operated a gaming site that provided online services to players. Organisations in this sector routinely collect account credentials, contact information and billing or shipping addresses to manage user accounts and facilitate community features. A breach at such a service is consequential because the data can be reused across other platforms where users maintain similar usernames or passwords.

What was likely exposed

The incident report listed the following categories of data as exposed: email addresses, names, passwords, physical addresses and usernames. The passwords were stored in plain text rather than hashed. No information has been released about whether additional fields such as payment details or IP logs were also taken.

Why it matters

Plain-text passwords combined with email addresses and usernames allow attackers to attempt logins on other services where individuals may have reused credentials. Physical addresses add a layer of personal detail that can support targeted phishing or identity-related fraud. For the organisation, the exposure of user data can lead to regulatory scrutiny and loss of trust among its user base.

What to do if you're exposed

Individuals who believe their information may have been included should change passwords on Lanwar and any other sites where the same credentials were used. Enabling multi-factor authentication wherever available adds protection against reuse of exposed passwords. Monitoring email accounts for unusual login attempts or unsolicited messages is also advisable.

• Change passwords on affected and related accounts immediately.
• Enable multi-factor authentication on all important services.
• Monitor email and financial accounts for suspicious activity.
• Run a free exposure scan of your email address against known breach datasets.

AICompiled with AI assistance from public sources and published under our editorial standards.