18 Million Minecraft Player Records Allegedly Breached and Sold

• •Hackers claim to sell 18 million Minecraft player records.
• •Data includes usernames, emails, and password hashes from specific servers.
• •Credential stuffing poses a significant risk for affected players.

Hackers are claiming to sell up to 18 million records of Minecraft players on dark web forums. Cybernews researchers analyzed samples of around 1,000 records, which included usernames, email addresses, and some password hashes. The data appears to originate from at least three specific Minecraft servers, ruling out a breach of Mojang Studios' or Microsoft's central servers. The presence of email addresses in databases like Have I Been Pwned suggests the data was harvested using infostealer malware. The exact age of the dataset is unknown, and it remains unclear whether the claims of 18 million or 9 million records are accurate. Microsoft has not publicly commented on the incident. The primary risk for affected players is credential stuffing, where attackers use leaked credentials to access other accounts.