StreamCraft Data Breach (2020): What Was Exposed & What To Do

Inside the incident

The breach was publicly noted in July 2020. Available records state that 1.8 million entries were involved, each containing a username, email address, IP address, and a password stored in hashed form using either the MD5 or bcrypt algorithm. No further details on the timing of the intrusion, the method of access, or the scale of any initial exfiltration have been disclosed in the reporting.

How a breach like this happens

Incidents involving online service accounts commonly begin with an attacker obtaining entry through stolen credentials, an unpatched vulnerability, or misconfigured access controls. Once inside, the attacker can locate and copy user databases that store account details and authentication data. Passwords are frequently retained only as hashes, yet the underlying records still contain identifiers such as email addresses and IP addresses that can be reused or combined with other datasets.

About StreamCraft

StreamCraft operated as a service tied to the Minecraft gaming community in Russia. Organizations in this sector maintain accounts that allow users to connect, communicate, and access game-related features. Such platforms routinely collect usernames, email addresses for account recovery, IP addresses for connection logging, and passwords for authentication. A breach at one of these services therefore places user account information into circulation that can be matched against other online services.

What was likely exposed

The reported dataset contained four categories of information for each of the 1.8 million records.

• Email addresses
• IP addresses
• Passwords stored as MD5 or bcrypt hashes
• Usernames

Why it matters

Exposure of email addresses and usernames can facilitate targeted phishing or account takeover attempts on other platforms where the same credentials may be reused. IP addresses can reveal approximate locations at the time of account activity. Hashed passwords reduce immediate risk when strong algorithms such as bcrypt are used, yet weaker MD5 hashes remain more susceptible to offline cracking. For the organization, the redistribution of the data increases the chance of repeated misuse over time.

What to do if you're exposed

Individuals who suspect their information may be involved should change passwords on StreamCraft and any other sites where the same credentials were used, enable multi-factor authentication where available, and monitor accounts for unusual login attempts. A free exposure scan of an email address against known breach datasets can indicate whether the address has appeared in public listings of this or other incidents.

AICompiled with AI assistance from public sources and published under our editorial standards.