Traderie traderie.com Traderie data breach: what happened and what to do
Reviewed by Anthon Wansland
Head of Product & Co-Founder
Serus is a privacy company with paid tools to find and remove your personal data. This page is free and based on official sources.
In September 2022, the in-game trading marketplace Traderie was breached, exposing 364,898 accounts: email addresses, IP addresses, usernames and links to social media profiles. No passwords are listed.
View all 13,118 breaches- Breach date
- 24 Sept 2022
- Affected
- 364,898
- Data exposed
- Email addresses, IP addresses, Social media profiles, Usernames
- Verified
- Yes
- Last updated
Source: Have I Been Pwned (CC BY 4.0)
What happened
Traderie is a marketplace where gamers trade in-game items. In September 2022 it suffered a data breach, and Have I Been Pwned (HIBP) added the data to its database in August 2024. HIBP counts 364,898 affected accounts. The exposed fields are email addresses, IP addresses, usernames and links to social media profiles. HIBP doesn't list passwords.
This is not the only Traderie incident. HIBP notes that the 2022 breach came before a later one: in September 2023, TechCrunch reported that Traderie, owned by Akrew, emailed users about a security incident in which an unauthorized third party took some account data. That incident also touched Akrew's Nookazon site. The company didn't say how many people were affected or exactly which data was taken.
What does this data let someone do? An email address plus a username and a link to your social profiles is enough to build a believable message. Expect phishing that mentions Traderie or trading, and messages on the social accounts you linked. An IP address gives a rough location, not your street address.
The practical risk is low compared with a breach that includes passwords or ID numbers, but it isn't zero. If you reused your Traderie email and username elsewhere, the same pair can be tried on other sites. The steps below take about 10 minutes.
Sources checked: haveibeenpwned.com, techcrunch.com, consumer.ftc.gov
Last verified against the official page:
What to do if you were in it
- 1
Change your Traderie password and any you reused
Even though HIBP doesn't list passwords for this breach, a later incident touched account data. Use a unique password for each site, kept in a password manager.
- 2
Turn on two-factor authentication
Turn it on for the email account you used and for any gaming or social accounts linked to your Traderie profile.
- 3
Expect phishing that mentions trading or Traderie
Don't click links in unexpected messages. The FTC explains how to spot and report phishing: https://consumer.ftc.gov/articles/how-recognize-and-avoid-phishing-scams.
- 4
Review the social profiles you linked
Check the privacy settings on those profiles and remove links you don't want tied to your trading username.
- 5
Check whether your email or phone is in this and other breaches
Run a free Serus scan. Serus monitors breach databases and the dark web and alerts you when your data appears, so you know which accounts to look at first.
Frequently asked
Was I affected by the Traderie data breach?
HIBP lists 364,898 accounts from the September 2022 breach. Search your email on Have I Been Pwned, or run a free Serus scan.
What was exposed in the Traderie breach?
Email addresses, IP addresses, usernames and links to social media profiles, according to HIBP.
Should I change my password?
HIBP doesn't list passwords for the 2022 breach, but a 2023 incident also affected Traderie accounts. Changing it and any reused password is a sensible, quick step.
Are there two Traderie breaches?
Yes. HIBP describes the September 2022 breach and says a subsequent breach followed the next year, which TechCrunch reported in September 2023.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
