All Breaches
September 9, 2013 Verified Gaming

Crack Community 2013 Data Breach

The Crack Community data breach concerns the compromise of a MyBB-based forum focused on game cracks in late 2013 and the publication of account data online.

19.2 Thousand
Affected Accounts
5
Data Types
Medium
Severity
Oct 10, 2026
Last updated

Protect Yourself

Check whether you were affected by this breach

Check my email

Exposed Data Types

5
  • Email addresses
  • IP addresses
  • Passwords
  • Usernames
  • Website activity

About This Breach

A verified public breach catalog lists the event as 9 September 2013 and 19,210 accounts. Reported data types are email addresses, IP addresses, passwords, usernames, and website activity.

How was the searchable email scope determined?

The reviewed archive explicitly names mybb_users.email, mybb_maillogs.fromemail, mybb_maillogs.toemail, mybb_mysubscriptions_log.receiver_email, and mybb_mysubscriptions_log.payer_email as email fields. Two independent parsers produced 17,171 safe unique email addresses from those fields. The historical user scope was already present; 88 addresses missing from the mail and subscription logs were imported additively. Password, IP, username, payment, and other fields were not added to the search index.

What is the source boundary?

The final mybb_posts INSERT in the main SQL member is truncated. The tables and statements containing the selected email fields are complete, and the truncated final table has no selected email-named field. The completeness claim therefore applies only to the proven email fields, not to the entire database. The catalog total of 19,210 accounts was not fitted to the imported email count.

What does a match mean?

A positive result means the queried email address appears in an explicitly named email field of the dataset bound to this event. It does not mean the account is compromised today. Reused or similar passwords should be changed on other services, active sessions and recovery channels should be reviewed, and multi-factor authentication should be enabled wherever possible.

Verification and editorial method

LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.

Report missing or incorrect information