Open CS:GO Data Breach (2017): What Was Exposed & What To Do

On November 28, 2017, a data breach affecting Open CS:GO was reported. The incident involved records for 512,000 individuals and exposed a 10GB file containing email addresses, IP addresses, phone numbers, physical addresses, usernames, avatars, social media profiles, and purchase histories. The site, which handled transactions for Counter-Strike: Global Offensive in-game items, later redirected visitors to dropgun.com. Multiple attempts to reach the organization received no response.

The exposure of this volume of personal and transactional data from a niche online marketplace raises standard questions about how such records are stored and protected, and what follow-up steps are available to those whose information appeared in the file.

Inside the incident

The breach was publicly noted in late November 2017. Contemporary reporting placed the underlying incident in December 2017 and described a single 10GB archive that included the data types listed above. No official statement from Open CS:GO has been recorded, and the original domain now forwards to another service. The exact method by which the file left the organization’s control remains undisclosed in available records.

How a breach like this happens

Incidents involving marketplaces that store customer contact details, transaction logs, and device identifiers often trace to unauthorized access to web servers or databases. Common vectors include the exploitation of unpatched software, compromised administrative credentials, or misconfigured storage that leaves archives accessible from the public internet. Once obtained, files of this size are sometimes posted to file-sharing sites or data-trading forums. Public attribution of responsibility is not possible when the organization does not publish an incident report.

Who is Open CS:GO?

Open CS:GO operated as an online platform for buying and selling virtual items, known as skins, used in Counter-Strike: Global Offensive. Such services maintain accounts tied to payment information, shipping details when physical goods are involved, and identifiers such as IP addresses for fraud prevention. A breach at a site of this type is consequential because the customer base tends to overlap with broader gaming communities, and the data retained can include both online and offline contact points.

What data was at risk

The reported file contained avatars, email addresses, IP addresses, phone numbers, physical addresses, purchase records, social media profiles, and usernames. No further categories have been confirmed. Organizations that process in-game item sales routinely collect these fields to complete transactions and manage accounts; however, the precise scope of records present in this particular archive has not been independently verified beyond the initial description.

The real-world impact

Individuals whose email addresses, phone numbers, and physical addresses appear in such a file may receive unsolicited messages or face attempts to link the information to other accounts. Purchase histories can reveal spending patterns or preferred payment methods. IP addresses and usernames may assist in correlating activity across services. The organization itself faces reputational damage and potential regulatory scrutiny, though no enforcement actions tied to this incident have been documented in public sources.

Were you affected?

Anyone who created an account on Open CS:GO before the reported incident should treat their listed contact details as potentially public. Practical first steps include monitoring email and phone accounts for unexpected messages, enabling two-factor authentication on linked services, and reviewing recent financial statements. Readers may also run a free exposure scan of their email address against known breach datasets to determine whether their information has appeared in this or other publicly discussed incidents.

AICompiled with AI assistance from public sources and published under our editorial standards.