SoarGames Data Breach (2019): What Was Exposed & What To Do

In December 2019, the gaming website SoarGames suffered a data breach that exposed 4.8 million unique email addresses along with associated usernames, IP addresses, and salted MD5 password hashes. The incident was reported on December 16, 2019. A notable portion of the email addresses appeared to have been generated rather than supplied directly by users. The company has since ceased operations, leaving limited public avenues for further clarification on the event.

Inside the incident

The breach involved the exposure of records from SoarGames, a platform that no longer operates. Public reporting at the time indicated that the dataset contained 4.8 million unique email addresses together with usernames, IP addresses, and salted MD5 password hashes. No official statement from the organization detailing the method of access, the precise date of the intrusion, or the total number of affected accounts beyond the email count has been identified in available records. The presence of generated email addresses suggests the site may have permitted or encouraged bulk or automated account creation, though the exact circumstances remain unconfirmed.

How a breach like this happens

Incidents involving the disclosure of usernames, email addresses, IP addresses, and password hashes commonly occur when an online service stores user credentials in a manner that later becomes accessible to unauthorized parties. Attackers may obtain such data through remote exploitation of web applications, compromised administrator credentials, or misconfigured databases that allow external access. Once obtained, the information is sometimes posted or shared on forums and data-trading platforms. Salted MD5 hashes, while an older hashing approach, still require additional computational effort to reverse compared with unsalted or plaintext storage, yet they remain susceptible to offline attacks when the full dataset is available.

About SoarGames

SoarGames operated as an online gaming website, a category of service that typically maintains user accounts to support gameplay, leaderboards, and community features. Organizations in this sector routinely collect email addresses for account recovery and notifications, usernames for identification within games, IP addresses for connection logging and abuse prevention, and password data for authentication. The scale of 4.8 million records indicates the platform had reached a sizable user base before it discontinued operations. A breach at such a service is consequential because gaming accounts often link to payment methods or other online identities, and the data can be reused across multiple platforms.

The information in question

The reported dataset included email addresses, usernames, IP addresses, and salted MD5 password hashes. No additional categories of information, such as names, physical addresses, or payment details, were named in the available reporting. Because the organization is now defunct, the complete contents of the exposed records have not been independently verified beyond the summary descriptions that accompanied the initial disclosure. It is therefore not possible to confirm whether further data types were present.

Why it matters

For individuals whose information appeared in the dataset, the primary concern is the potential reuse of email addresses and passwords on other services. IP addresses can contribute to profiling or targeted activity, while usernames may allow correlation of accounts across sites. For the organization, the incident occurred at a time when it was still active, which could have affected user trust and operational continuity. The fact that a substantial number of email addresses appeared generated rather than user-supplied does not reduce the exposure for those records that corresponded to real accounts.

If your data was in this breach

Individuals can begin by changing passwords on any accounts that reuse credentials from the affected service and enabling multi-factor authentication where available. Monitoring email accounts for unusual login attempts or unsolicited messages provides an additional layer of awareness. Running a free exposure scan of an email address against known breach datasets can indicate whether the address has appeared in this or other documented incidents, allowing targeted follow-up actions such as password resets on linked services.

AICompiled with AI assistance from public sources and published under our editorial standards.