Battlefy Credential Incident (January 2016)
The January 2016 Battlefy credential incident consists of emails, usernames, and bcrypt password hashes. The external source reports 83,610 accounts and local search contains 89,276 records; the local measure is 5,666 higher.
Exposed Data Types
3- Email addresses
- Usernames
- Hashed passwords
About This Breach
January 11 is the structured incident or catalogue date.
Bcrypt is not plaintext and slows offline password testing, but algorithm cost, field prevalence, whether any particular hash was cracked, password currentness, and reuse are unknown at person level. Names, phones, physical addresses, government IDs, payments, tournament results, prizes, team roles, and administrator privileges are not classes.
A match can establish only that an email occurs in the local subset associated with Battlefy. It does not establish identity, an active account, a player, team, or organizer role, tournament participation, username or password ownership, field co-occurrence, account takeover, or misuse. If the old password genuinely belonged to the person and was reused, it should be replaced.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
