Amplitude Studios Data Breach
The 2016 Amplitude Studios data breach occurred in June 2016 when unauthorized threat actors gained access to the community forum and Games2Gether platform of Amplitude Studios (amplitude-studios.com), the acclaimed French video game developer behind the Endless Space, Endless Legend, and Humankind franchises.
Exposed Data Types
5- Email addresses
- Usernames
- Passwords
- IP addresses
- Dates of birth
About This Breach
The incident exposed registered gamer community profiles, encrypted credentials, and personal demographic details.
What information was affected in the Amplitude Studios incident?
The leaked forum export contains membership records from the studio's official community database. The compromise affected 143,476 unique player profiles, exposing the following categories of personal data:
- Account Identifiers: Community usernames and internal member IDs (userid).
- Contact Credentials: Canonical email addresses.
- Security Credentials: Cryptographic password hashes alongside unique salt parameters.
- Network Telemetry: Registration and last active IP addresses.
- Demographic Details: Registered dates of birth.
How many accounts were affected?
Rigorous deduplication and canonical verification confirmed 143,476 unique canonical email addresses across 143,818 raw forum member records.
Technical analysis and security risks
The leak originates from an unauthorized SQL export of the vBulletin community forum database. Given high credential reuse among gaming audiences, the exposed combination of email addresses, usernames, and password hashes poses significant risks of automated credential stuffing attacks against gaming platforms like Steam, Discord, and Epic Games Store, as well as targeted phishing simulations.
Recommended actions for affected users
Gamers who held an account on Amplitude Studios or Games2Gether should:
- Immediately update passwords on Steam, Discord, or any other platforms where their 2016 forum password may have been reused.
- Be cautious of unsolicited emails claiming to provide game keys, alpha playtest access, or beta invites.
- Enforce two-factor authentication (MFA / 2FA / Steam Guard) across all primary digital gaming accounts.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
