Go Ninja Data Breach
The December 2019 dataset attributed to Go Ninja is catalogued by a public breach source under the defunct German gaming site goninja.de with 4,999,001 unique email strings and username, IP, and salted MD5 password-hash classes.
Exposed Data Types
4- Email addresses
- Usernames
- IP addresses
- Hashed passwords
About This Breach
December 17 is the structured date; the narrative says only December 2019, and there is no operator notice.
Crucially, more than 4 million emails appeared generated rather than organically supplied by users. The 4,999,001 figure is therefore not real people, organic registrations, active accounts, affected users, or notices. The dataset may be synthetic, seeded, scraped, polluted, or mixed; the generated-address classification method and field co-occurrence are unexplained.
There is no local import job, source file, or searchable data. Even a future exact-string match would not prove that the address was organically registered, controlled by the searcher, or linked to a real Go Ninja account, and IP, username, and password co-occurrence could not be inferred.
Salted MD5 is not plaintext. Only a real authenticated credential row with an old password reused elsewhere should trigger replacement. Generated records and gaming association require the strictest false-association safeguards and private handling.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
