All Breaches
February 17, 2016 Unverified Gaming

Ikov RSPS 2016 Data Breach

In February 2016, a player authentication database belonging to Ikov (ikov.org), one of the most prominent RuneScape Private Server (RSPS) gaming communities, was breached and circulated across underground hacking databases.

316.6 Thousand
Email Identifiers
3
Data Types
High
Exposure Scope
Oct 10, 2026
Last updated

Protect Yourself

Check whether you were affected by this breach

Check my email

Exposed Data Types

3
  • Usernames
  • Hashed passwords
  • IP addresses

About This Record

The exposed database dump (Ikov.org_SaltedSHA1_Ingame_316k.txt) contains 316,583 registered player accounts. Compromised data points include player usernames, salted MD5/SHA-1 password hashes with accompanying salt values, internal user IDs, and connection IP addresses.

Given the widespread prevalence of credential reuse among online gamers, the exposure of these credentials creates direct exposure to credential-stuffing attacks across gaming networks, Steam, Discord, and primary email accounts.

Players who held an account on the Ikov servers are strongly advised to rotate passwords on any platform where similar credentials were used and secure accounts with multi-factor authentication.

Verification and editorial method

LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.

Report missing or incorrect information