ILikeCheats Forum Breach Exposes 188,847 User Accounts and Weak MD5 Password Hashes
What Happened — In October 2014 the ILikeCheats gaming‑cheat forum (ilikecheats.net) suffered a breach that released 188,847 records. The leaked data included usernames, email addresses, IP addresses and MD5‑hashed passwords stored in the underlying vBulletin forum software.
Why It Matters for Trust & Control Assurance
- Highlights the risk of weak credential‑storage practices; continuous control‑assurance programs require evidence that passwords are hashed with strong, salted algorithms.
- Demonstrates the need for ongoing monitoring of forum and web‑application configurations to detect and remediate insecure defaults before data is exfiltrated.
Who Is Affected – Online gaming communities, hobbyist forums, and any SaaS platforms that rely on legacy forum software or similar content‑management stacks.
Recommended Actions – Review and upgrade password‑hashing mechanisms (e.g., migrate from MD5 to bcrypt/argon2), enforce multi‑factor authentication for privileged accounts, and implement continuous configuration monitoring to flag insecure defaults.
Technical Notes – The breach stemmed from a misconfiguration and outdated vBulletin version that stored passwords as unsalted MD5 hashes, a known weak algorithm. No CVE is associated, but the exposure of IP addresses and email addresses adds privacy risk. Source: Have I Been Pwned – ILikeCheats breach