BlankMediaGames blankmediagames.com BlankMediaGames data breach: what happened and what to do
In December 2018, the Town of Salem game site run by BlankMediaGames was breached. About 7.6 million email addresses leaked with usernames, IP addresses, purchase histories and hashed passwords.
View all 13,115 breaches- Breach date
- 28 Dec 2018
- Affected
- 7,633,234
- Data exposed
- Browser user agent details, Email addresses, IP addresses, Passwords, Purchases, Usernames, Website activity
- Verified
- Yes
- Last updated
Source: Have I Been Pwned (CC BY 4.0)
What happened
In December 2018, the website for Town of Salem, an online game made by BlankMediaGames, suffered a data breach. The data reached Have I Been Pwned in January 2019 and covers about 7.6 million unique email addresses. According to Dark Reading's report, the company said it was working with its hosting provider to find the cause and told players to change their passwords.
What was exposed
The records include email addresses, usernames, IP addresses, browser user agent details, website activity and purchase histories. Passwords were stored as phpass hashes, a scrambled form that is much harder to read than plain text but can still be cracked when a password is weak.
What it means for you
An email address plus a username lets scammers write messages that name the game. IP addresses give a rough location. If you reused your Town of Salem password elsewhere and it was easy to guess, someone can try it on your other accounts.
What to do
Change the password on any account that shared it, turn on two-factor login, and treat game-themed emails asking you to log in as suspect.
What to do if you were in it
- 1
Change your Town of Salem password, and any you reused
If you used the same or a similar password on another account, change it there too. A password manager makes unique passwords easy.
- 2
Turn on two-factor login
Use an authenticator app or a passkey on your email and other important accounts. It blocks most takeovers even when a password is already out.
- 3
Expect phishing that fits the data
Messages that mention Town of Salem, your username or a purchase may be scams. Open the game site yourself instead of clicking links in them.
- 4
Check which other breaches include you
Run a free Serus scan to see whether your email or phone number appears in this and other breaches. Serus monitors breach databases and the dark web and alerts you when your details show up again.
Frequently asked
Was I affected by the BlankMediaGames breach?
Check your email on Have I Been Pwned or run a free Serus scan. If you had a Town of Salem account in 2018, assume yes.
What was exposed?
Email addresses, usernames, IP addresses, purchase histories, browser details and website activity, plus passwords stored as phpass hashes.
Should I change my password?
Yes, on the game and anywhere you reused it. Then turn on two-factor login on your important accounts.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
