Traderie Data Breach Exposes 364,898 User Records
What Happened — In September 2022 the in‑game trading marketplace Traderie suffered a breach that released nearly 400 k user records. The compromised data set includes email addresses, IP addresses, usernames and links to social‑media profiles.
Why It Matters for Trust & Control Assurance
- The incident illustrates a failure to enforce robust identity and access controls over user‑account data, a core control area that continuous‑monitoring programs are built to verify.
- Demonstrable evidence of credential hygiene, MFA enforcement and privileged‑access review can provide a defensible audit trail when regulators or partners inquire about data‑privacy posture.
Who Is Affected – Online gaming platforms, digital marketplaces, and any SaaS service that stores user‑identifying information.
Recommended Actions – Review and harden authentication mechanisms (enforce MFA, rotate credentials), inventory and monitor privileged accounts, and collect evidence of access‑control policies for audit readiness. Source: https://haveibeenpwned.com/api/v3/breach/Traderie
Technical Notes – The breach exposed email, IP, username and social‑media link data; the exact attack vector was not disclosed, but the exposure suggests inadequate protection of credential stores or insufficient segmentation of user data. Source: https://haveibeenpwned.com/api/v3/breach/Traderie