All Breaches
February 1, 2016 Verified Sensitive Record Gaming

Flash Flash Revolution (2016 Data Breach)

The 2016 Flash Flash Revolution data breach involved unauthorized access to account data from the music-based rhythm game and forum community in February 2016.

1.8 Million
Reported Records
4
Data Types
Critical
Severity
Oct 10, 2026
Last updated

Protect Yourself

Check whether you were affected by this breach

Check my email

Exposed Data Types

4
  • Email addresses
  • IP addresses
  • Passwords
  • Usernames

About This Breach

The record covers 1,771,845 unique accounts and is separate from the service's 2019 incident. The verified affected fields were email addresses, usernames, IP addresses, and salted MD5 password hashes.

Password reuse is the main risk associated with this record. Anyone who reused the same or a similar password on another game, forum, email, or social-media account should change it and enable multi-factor authentication. A salted MD5 hash is not a plaintext password, but MD5 is considered weak by current security standards and simple passwords may be cracked.

The verified data types in this 2016 record are email addresses, usernames, IP addresses, and salted MD5 password hashes. Date of birth, telephone number, physical address, and financial information are not among the verified fields for this record. Monitor for suspicious logins and phishing messages, and secure every account where the same password was used without conflating this incident with the 2019 record.

Verification and editorial method

LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.

Report missing or incorrect information