SoarGames Data Breach Exposes 4.8 M User Accounts
What Happened – In December 2019 the now‑defunct gaming site SoarGames suffered a breach that released 4,774,445 unique records. The disclosed data included email addresses, usernames, IP addresses and salted MD5 password hashes, many of which were generated rather than user‑provided.
Why It Matters for Trust & Control Assurance
- Demonstrates the risk of weak credential storage – a core control area that continuous‑control programs must monitor and evidence.
- Highlights the need for robust password‑hashing standards and periodic validation of cryptographic practices as part of an audit‑ready posture.
- Provides a real‑world example of why organizations should maintain defensible evidence of credential‑management controls (e.g., hashing algorithm reviews, MFA enforcement).
Who Is Affected – Online gaming platforms, consumer‑facing web services, and any organization that stores user credentials.
Recommended Actions
- Replace MD5‑based hashing with a modern, memory‑hard algorithm (e.g., Argon2, bcrypt, scrypt).
- Enforce multi‑factor authentication for all accounts where feasible.
- Conduct a credential‑storage audit and capture evidence of hashing standards for audit readiness.
- Monitor for credential reuse on external breach‑monitoring services and remediate compromised accounts.
Technical Notes – The breach vector has not been publicly disclosed; however, the exposure of salted MD5 hashes indicates inadequate cryptographic controls. Source: [Have I Been Pwned – SoarGames breach]