Loading story…
Dragonica Lunaris, a European private server for the MMORPG Dragonica operating at playdragonica.eu, disclosed a data breach that exposed about 126,000 user records. The compromised data included email addresses, usernames, dates of birth, and bcrypt password hashes, indicating both personal information exposure and credential risk for affected players.
The incident occurred in December 2025 and was later confirmed by the service operator, who said the underlying issue had been fixed. The breach has since been cataloged by Have I Been Pwned, bringing broader visibility to the compromise and enabling impacted users to check whether their account data was included.
See attribution, scope, and your downstream exposure.
2 events from the most recent confirmed update back to the earliest known activity.
Following the breach, the service operator confirmed the incident and stated that the underlying issue had been fixed. This response was disclosed in reporting published on 2026-05-21.
In December 2025, the European Dragonica private server Dragonica Lunaris experienced a data breach that exposed approximately 126,000 records. The compromised data included email addresses, usernames, dates of birth, and bcrypt password hashes.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See attribution, scope, and whether this vendor sits anywhere in your supply chain.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Club Penguin Rewritten, an independent recreation of Disney's Club Penguin, suffered two major data breaches that exposed account data from its user base. The first incident, in January 2018, affected nearly **1.7 million** unique email addresses, along with usernames, IP addresses, and passwords stored as `bcrypt` hashes; the site said at the time that it was aware of the breach and had contacted affected users. A second breach in July 2019 exposed another **4 million** unique email addresses and included the same categories of data: email addresses, usernames, IP addresses, and `bcrypt`-hashed passwords. Combined, the incidents left roughly **5.7 million** accounts exposed across the two compromises, underscoring repeated security failures at a gaming platform aimed at children and young users.
Jun 29, 2026
**Cloud Imperium Games (CIG)** disclosed that it suffered an IT incident on **January 21** described as a “systematic and sophisticated attack,” resulting in **unauthorized access to some backup systems** and **limited access to users’ personal data**. CIG stated the exposed information was limited to basic account details such as **names, usernames, contact information, and dates of birth**, and asserted that **no passwords** were impacted, **no financial/payment data** was accessible, access was **read-only**, and there was **no data modification**. The disclosure triggered backlash from users over **how and when** the company communicated the breach, with reporting highlighting that CIG initially surfaced the incident via a low-visibility website “service alert” popup rather than prominent notices or direct outreach. Coverage also emphasized that even “basic” identity and contact data can materially increase **phishing and social-engineering risk**, especially when combined with other breached datasets to build richer victim profiles.
Jun 29, 2026
Several organizations disclosed data breaches affecting user and customer information, with incidents spanning different industries and timeframes. The Botting Network, a now-defunct forum focused on botting, suffered a breach in August 2012 that exposed 96,000 user records, including email addresses, usernames, dates of birth, and salted MD5 password hashes. Web Hosting Talk, a vBulletin-based forum, experienced a breach in July 2016, resulting in the exposure of 515,000 user records containing usernames, email addresses, IP addresses, and salted MD5 password hashes. Both breaches were added to public breach notification services in December 2025. In a separate incident, AUTOSUR, a French vehicle inspection company, reported a breach in March 2025 that compromised over 10 million customer records, with 487,000 unique email addresses exposed alongside names, phone numbers, physical addresses, and detailed vehicle information. Additionally, Vocatura, Spagnuolo & Company, a Massachusetts-based accounting firm, disclosed a breach involving unauthorized access to a single email account, potentially exposing sensitive personal information of over 980 individuals. The exact data types affected in the Vocatura breach have not been publicly specified as of the latest disclosure.
Jul 12, 2026