[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f2d16y7cgpmses":3},{"success":4,"breach":5},true,{"_id":6,"name":7,"title":8,"slug":9,"domain":10,"breachDate":11,"addedDate":12,"modifiedDate":12,"contentUpdatedAt":13,"source":14,"sourceUrl":15,"sourceUrls":16,"pwnCount":17,"affectedCount":17,"affectedCountStatus":18,"affectedCountLowerBound":19,"affectedCountUnit":20,"hasEnglishDescription":4,"severity":21,"dataClasses":22,"description":25,"seoTitle":15,"seoTitleEn":26,"seoDescription":15,"seoDescriptionEn":27,"logoUrl":28,"isVerified":4,"isSensitive":29,"isSpamList":29,"isMalware":29,"company":30},"68e3266eda11adda4882519f","earth2","Earth 2 Data Breach","earth-2","earth2.io","2024-10-16T00:00:00.000Z","2024-11-07T04:49:02.000Z","2026-07-18T23:49:59.504Z","Third party breach","",[],420961,"known",null,"unknown","High",[23,24],"Email addresses","Usernames","\u003Cp>Earth 2 is a platform that operates with user profiles and player names as a virtual world and virtual land game. In the October 2024 event, approximately 421 thousand unique email addresses were derived from MD5-based email traces in embedded avatar links and appeared alongside player usernames.\u003C\u002Fp>\u003Cp>This incident should not be described like a classic password or database leak. Earth 2 has stated that the feature related to Gravatar links has been disabled on the platform. These are verified scoped email addresses and usernames; it has not been indicated that passwords, financial data, or additional personal information were leaked.\u003C\u002Fp>\u003Ch2>Leaked Data Types and Risks\u003C\u002Fh2>\u003Cp>The data classes observed in the Earth 2 record should be treated as email addresses and usernames. Email addresses can be used for targeted phishing, password reset schemes, and account matching across different services. Usernames can help link pseudonyms across different platforms and personalize social engineering messages.\u003C\u002Fp>\u003Cp>When the email and player username are together, the player ID can be matched with other game, forum, or social media profiles. Even if the password has not been leaked, there may be risks of targeted in-game messages, fake trades, account verification, or investment-themed scams.\u003C\u002Fp>\u003Ch2>Verified Scope and Boundaries\u003C\u002Fh2>\u003Cp>This record is associated with the earth2.io domain name and the October 2024 Gravatar-based email derivation incident. The scope is limited to email addresses and usernames. Password, payment, virtual asset balance, or personal address fields are not verified data classes for this record.\u003C\u002Fp>\u003Cp>Areas not present in this record should not be described as if they have leaked. Full payment cards, official identification, private messages, health data, bank information, device content, or data belonging to other platforms should only be included in the risk assessment if they are explicitly present in the record. The text is based on verifiable data classes and the known boundaries of the incident.\u003C\u002Fp>\u003Ch2>User Groups at Risk\u003C\u002Fh2>\u003Cp>Earth 2 players, people who use the same username on different gaming platforms, users who quickly respond to virtual asset or in-game trade notifications, and account holders who link their game account with their personal email are at risk.\u003C\u002Fp>\u003Cp>Users who use the same email address on different services, reuse their old passwords, keep their nicknames the same across many communities, or do not separate their work and personal accounts are at higher risk. The risk in profile and data broker records arises from the combination of very different domains from a single account, creating detailed context about the person.\u003C\u002Fp>\u003Ch2>Urgent Measures to Be Taken\u003C\u002Fh2>\u003Cp>Users should verify messages regarding account verification, trading, investment, or virtual assets that come in the name of Earth 2 through the official channel. Since the password leakage is not verified, the main action is not a password panic, but paying attention to phishing attempts coming with email and username matches.\u003C\u002Fp>\u003Cp>Users in the positive match area should renew their passwords on accounts where they use the same or similar passwords, enable two-factor authentication where possible, and check their recent sessions. Records that do not contain passwords but include contact, billing, address, or profile data should be monitored for unexpected calls, offers, support, billing, and verification messages.\u003C\u002Fp>\u003Ch2>Long-Term Security Strategies\u003C\u002Fh2>\u003Cp>In the long term, the habit of using a password manager, unique passwords, two-factor authentication, and removing unnecessary personal information from accounts reduces risk. Reusing the same email address across different platforms makes it easier to combine data from different breaches; using a separate email or alias for critical accounts can be considered.\u003C\u002Fp>\u003Cp>Using the same nicknames across different platforms in game accounts increases the risk of profile matching. Users should consider using separate emails and unique usernames for their game accounts.\u003C\u002Fp>\u003Ch2>Record Control and User Action\u003C\u002Fh2>\u003Cp>LeakData check indicates whether the queried email address is present in this record. A positive result does not necessarily mean that all data fields definitely belong to that user; however, it is a sufficient warning for precautionary measures. A negative result only indicates that there is no match in this dataset and does not eliminate the possibility of appearing in other breaches.\u003C\u002Fp>\u003Cp>A positive result indicates that the email address appears in Earth 2 records along with the player's username. This result does not imply a password or financial data leak; however, it requires caution against targeted gaming scams.\u003C\u002Fp>","Earth 2 Data Breach (421 Thousand Reported Records)","Earth 2 Data Breach. 421 Thousand reported records were reported. Reported data: Email addresses, Usernames. Review the scope, risks, and protective steps.","\u002Fuploads\u002Flogo\u002Fearth2_io.webp",false,{"name":31,"sector":32,"country":33,"website":10,"websiteArchiveUrl":15,"websiteStatus":15,"websiteCheckedAt":19},"Earth 2","Gaming \u002F Virtual World","Global"]