Horse Isle Data Breach
The Horse Isle 1 security events were two separate service and account incidents announced by the operator on June 23 and September 19, 2020. For each event, the operator said it restored a 4 a.m.
Exposed Data Types
7- Email addresses
- Genders
- IP addresses
- Names
- Passwords
- Purchases
- Usernames
About This Breach
PST backup, treated account passwords as likely compromised, and directed players through verification, unlock, or password-reset steps. Those notices do not establish that every password was definitely taken or confirm every dataset field.
A public breach source reports a combined 27,786 unique email addresses across the two events and the collection-level classes emails, genders, IPs, names, passwords, purchases, and usernames. A public breach source also says plaintext passwords and values typed during failed login attempts were retained in plaintext. Those are a public breach source dataset findings; all fields or failed attempts should not be assumed present with every email. A purchase class does not establish card, amount, or item details.
No Horse Isle data is locally searchable. The record does not identify anyone as a player, child or young person, parent, family-account holder, or person of a particular gender; it cannot establish username, IP, purchase, password or failed-attempt presence, field co-occurrence, or misuse. Plaintext passwords and attempted values must never be publicly exposed.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
