War Inc. Data Breach (2012): What Was Exposed & What To Do

In mid-2012 the operator of the real-time strategy game War Inc. experienced a data breach that exposed more than one million user accounts. Public records of the incident, first noted on 4 July 2012, list the compromised records as usernames, email addresses and salted MD5 password hashes, along with website activity logs. No further technical details or confirmation of the intrusion method have been released by the company.

What happened

The breach occurred sometime before the July reporting date and affected an estimated 1 million accounts. The exposed material included usernames, email addresses and salted MD5 hashes of passwords, together with records of website activity. No information has been made public about the number of files involved, the precise date range of the intrusion, or any subsequent actions taken by the operator to contain or investigate the event.

How a breach like this happens

Incidents involving the disclosure of usernames, email addresses and password hashes commonly begin with unauthorised access to an organisation’s user database. Attackers may obtain entry through compromised credentials, unpatched server software or misconfigured access controls. Once inside, they can copy the authentication tables and any associated activity logs before the intrusion is detected. The use of salted hashes indicates that passwords were stored in a hashed rather than plaintext form, though the strength of the hashing algorithm and the handling of those hashes after the breach remain undisclosed.

About War Inc.

War Inc. is an online real-time strategy game whose platform maintains accounts for players. Such services routinely collect usernames, email addresses and activity data to manage logins, in-game purchases and community features. A breach at a gaming service can therefore expose the identifiers that players use across multiple sites, because many individuals reuse the same credentials.

What data was at risk

The records reported as exposed are usernames, email addresses, salted MD5 password hashes and website activity. The exact scope of the activity logs and whether any additional fields such as payment details were present have not been confirmed. Organisations of this type typically store only the data required for account management; without an official statement the full contents of the dataset remain unverified.

What's at stake

Individuals whose records appeared in the dataset face the possibility that their email addresses and password hashes could be used in attempts to access other online services where the same credentials were reused. The operator may incur costs related to user notifications, security reviews and potential regulatory scrutiny, though no such actions have been documented in connection with this incident.

If your data was in this breach

Anyone who held a War Inc. account in 2012 should change the password on that account and on any other service that used the same credentials. Enabling two-factor authentication where available reduces the value of a leaked password hash. Running a free exposure scan of the email address associated with the account can show whether the address has appeared in other known breach datasets.

AICompiled with AI assistance from public sources and published under our editorial standards.