LucasForums Data Breach
The 2016 LucasForums data breach occurred in May 2016 when the vBulletin forum database of LucasForums (lucasforums.com), the historic modding and gaming community dedicated to LucasArts and Star Wars video games, was compromised and published online.
Exposed Data Types
4- Email addresses
- Usernames
- Passwords
- IP addresses
About This Breach
What information was affected in the LucasForums incident?
The leaked membership dump (Lucasforums.com_VB_MAY_2016.txt) captures decades of forum history across titles such as Star Wars: Knights of the Old Republic, Jedi Knight, Monkey Island, and Grim Fandango. The incident compromised records for 151,400 unique community members, exposing:
- Account Identifiers: Discussion forum usernames.
- Contact Credentials: Canonical email addresses across network domains (including LFNetwork) and global mail providers.
- Authentication Secrets: Salted MD5 password hashes and per-user cryptographic salts.
- Network Telemetry: User IP addresses logged during activity.
How many accounts were affected?
Rigorous RFC canonical parsing and deduplication confirmed 151,400 unique valid email addresses.
Technical analysis and security risks
Attackers exploited vulnerabilities in the unpatched vBulletin installation to dump the core user tables. Salted MD5 hashes offer insufficient modern resistance to GPU-assisted cracking, posing severe credential-stuffing risks against gaming profiles, Steam accounts, and secondary email addresses.
Recommended actions for affected users
Former members of LucasForums should:
- Promptly update passwords across any active gaming services or email accounts where their old forum password was reused.
- Enforce two-factor authentication (such as Steam Guard or authenticator apps) across all gaming and storefront platforms.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
