DayZ Forum 2016 Data Breach
The DayZ Forum 2016 data breach is a verified incident affecting forums.dayzgame.com, operated by Bohemia Interactive.
The organization has not published how many were affected, so the incident cannot be placed on this scale.
Exposed Data Types
7- Email addresses
- Usernames
- IP addresses
- Geographic locations
- Dates of birth
- Passwords
- Password salts
About This Breach
The company statement published in February 2016 says that all forum usernames, e-mail addresses, and passwords were accessed and downloaded by attackers. It also says passwords were not stored in plaintext, but does not disclose an exact affected-person count.
How was the source bound to the event?
The main member in the sealed archive is named DayZ.com_Forum.txt. Its header contains name, e-mail, IP-address, country, birth-date components, password-hash, and salt fields. An independent catalog lists DayZ, 2016, dayz.com, 206,537 records, and the same unusual class combination. The 47-row difference from the complete local file’s 206,584 data rows, together with the filename and schema alignment, binds this exact archive to the event with high confidence; no public count was used as an extraction target.
What appears in LeakData search?
Only the logical field identified as e-mail by the source header is made searchable. When a colon inside a username shifts the physical columns, the row is repaired deterministically by the valid IPv4 and two-letter country code immediately following the e-mail. Two independently compiled parsers processed all 206,584 rows and agreed byte-for-byte on 206,522 accepted e-mail occurrences and 206,479 unique canonical addresses. Usernames, IP addresses, birth dates, password hashes, and salts are not added to search.
How many people were affected?
The operator statement says all forum users were affected but does not give a user count. The 206,537 secondary-catalog records, 206,584 source rows, 206,522 accepted e-mail occurrences, and 206,479 unique canonical addresses use different measurement grains. LeakData does not substitute any of them for a person count and leaves pwnCount unknown.
What does a match mean?
A positive result means the searched address appears in the e-mail field of the sealed source bound to the February 2016 DayZ forum incident. It does not prove that the person’s game account, Steam account, in-game inventory, or payment data was exposed; the incident concerned the forum service. It also does not establish current account ownership or that the address remains active.
What should users do?
If the DayZ forum password was reused on another service, replace it there with a unique password and enable multi-factor authentication where available. Verify the sender and destination domain before opening links in unexpected DayZ or Bohemia messages. A bare e-mail match does not by itself justify assuming another account was compromised or rotating unrelated passwords.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
