Information from accounts in Mortal Online, an online MMORPG game, has been leaked onto the Internet following a breach in the game's servers.
On June 17, an unauthorized user gained access to the server that stores the game's databases and copied all the data. The affected accounts total approximately 570,000.
Mortal Online developers announced the breach when they became aware of it, 4 days later, and an investigation followed which led to evidence confirming the breach. For the information of users, the developers informed that they do not keep copies of sensitive information such as debit card numbers.
However, although card details were leaked, the database contained the usernames and passwords of more than half a million accounts, which were stored in MD5 hashes.
MD5 is a type of encryption that is mainly used to check the integrity of data after it has been transferred (e.g. after downloading from a website). It is susceptible to bruteforce attacks, and can be decrypted in seconds. It was deemed insecure in 2012 by its founder himself, when it was revealed how easily it can be decrypted.
The database, since it was stolen, has been available for sale in various places online, and there are already reports of it being used for credential stuffing. This means that each username and password combination is tested on different platforms and services, which shows how important it is to not use the same password everywhere.
Now, the database data has been added to have i been pwned, so users can see if their accounts have been compromised.
