OpenRaid Data Breach
The 2019 OpenRaid data breach occurred in November 2019 when the user database of OpenRaid (openraid.org), a prominent cross-realm raiding and dungeon grouping network for World of Warcraft players launched in 2012, was breached and published on online hacking platforms.
Exposed Data Types
4- Email addresses
- Usernames
- Passwords
- IP addresses
About This Breach
What information was affected in the OpenRaid incident?
The compromised user authentication export (Openraid.org.csv) includes player profiles. Impacted records for 456,159 unique players encompass:
- Account Profiles: Player forum and raid usernames.
- Contact Credentials: Canonical validated email addresses.
- Authentication Secrets: Passwords hashed using phpass (WordPress/phpBB standard
$H$9...). - Network Identifiers: Member IP addresses.
How many accounts were affected?
Rigorous RFC canonical parsing and deduplication across 457,083 user accounts confirmed 456,159 unique valid email addresses.
Technical analysis and security risks
While phpass hash structures incorporate salt, offline dictionary attacks and rainbow tables pose a threat to weak or reused passwords. Gaming databases are frequently leveraged by cybercriminals in automated credential stuffing attacks against gaming platforms like Blizzard Battle.net, Steam, and Twitch.
Recommended actions for affected users
World of Warcraft players who used OpenRaid should:
- Immediately change passwords across current accounts where the same credentials may have been reused.
- Enforce multi-factor authentication (MFA/2FA) on all email, gaming, and communication platforms.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
