Evony 2016 Data Breach
The 2016 Evony data breach involved unauthorized access to the main game database and affected approximately 29,396,116 verified, deduplicated accounts.
Exposed Data Types
4- Email addresses
- IP addresses
- Passwords
- Usernames
About This Breach
The incident date is June 1, 2016; higher raw-record figures reported at the time are not the same measure as the deduplicated account count shown here.
The record contains email addresses, IP addresses, passwords, and usernames. Passwords were stored as unsalted MD5 hashes, a weak method that leaves short or reused passwords exposed to offline guessing. This record is separate from the forum incident.
A match means that the email address appears in the verified main-game dataset; it does not prove a current account compromise or inclusion in the separate forum record. Replace reused passwords everywhere and review game and email sessions.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
