Armor Games Data Breach Confirmed, Took Place in January 2019

An Armor Games data breach took place back in January 2019. While details of this data breach were first brought to light earlier this year, Armor Games has only recently confirmed the data breach in an e-mail to their customers.

The Armor Games data breach first came to the company's attention on January 29, 2019, courtesy of Tuik Security Group. An internal investigation took place and determined that a breach did indeed occur on January 1, 2019. From what they can tell, the breach was part of a larger operation that involved over a dozen different websites and ultimately saw the collected data put up on the darknet.

If you have an Armor Games account, you'll probably want to know what information was compromised. Here's what the hacker got their hands on:

• Public profiles
• Login data
  • Usernames
  • E-mail addresses
  • IP Addresses
  • Hashed passwords
• Birthdays of administrator accounts
• Information about password protection (including the password salt)

On the upside, Armor Games does not keep data on first or last names, credit card data, addresses, or phone numbers. However, this information (and other potentially private data) may have been maintained on one of the other sites that were breached. Here is the full list of sites that were affected by this breach and their user counts:

• Dubsmash (162 million)
• MyFitnessPal (151 million)
• MyHeritage (92 million)
• ShareThis (41 million)
• HauteLook (28 million)
• Animoto (25 million)
• EyeEm (22 million)
• 8fit (20 million)
• Whitepages (18 million)
• Fotolog (16 million)
• 500px (15 million)
• Armor Games (11 million)
• BookMate (8 million)
• CoffeeMeetsBagel (6 million)
• Artsy (1 million)
• DataCamp (700,000).

If you or someone you know was affected by this breach, you should follow the standard procedure for such an unfortunate incident. Change out your password on the affected sites and make sure your e-mail is secure. If you made the mistake of sharing a password across multiple sites, you probably should change those out, too.

The Armor Games data breach will continue to be investigated by the company as they work to harden their defenses against future attacks. Armor Games asks that anyone with concerns about the breach contact them at support@armorgames.com. Further updates about the breach will be posted to this blog post.

Were you affected by the Armor Games data breach? What do you think of how the company handled the issue? Let us know in the comments below!