Team SoloMid Exposes 442,166 User Accounts in 2014 Data Breach
What Happened — In December 2014 the esports organization Team SoloMid (solomid.net) was compromised. Attackers extracted 442,166 user records containing email addresses, IP addresses, usernames and salted password hashes.
Why It Matters for Trust & Control Assurance —
- The incident illustrates the exact scenario a continuous identity‑and‑access‑control assurance program is built to prevent and document.
- Robust credential protection (strong hashing, MFA, regular rotation) and evidence of those controls are essential for a defensible audit trail.
- Mapping this breach to the Access Control objective of NIST CSF 2.0 shows how a single control area underpins multiple compliance regimes.
Who Is Affected — Esports and gaming communities, sponsors, and any downstream services that relied on TSM credentials.
Recommended Actions — Review password‑storage algorithms, enforce multi‑factor authentication for all accounts, rotate compromised credentials, and implement continuous monitoring of authentication logs to generate audit‑ready evidence.
Technical Notes — The breach was reported via HaveIBeenPwned; the exact attack vector was not disclosed. Exposed data types: email, IP address, username, salted password hash. Source: [HaveIBeenPwned breach API]