Earth 2 Data Breach

What happened

In October 2024, 421k unique email addresses from the virtual earth game Earth 2 were derived from embedded Gravatar images. Appearing alongside player usernames, the root cause was related to how Gravatar presents links to avatars as MD5 hashes within consuming services, a feature Earth 2 advised has now been disabled on their platform. This incident did not expose any further personal information, passwords or financial data.

Exposed data

Recommended actions

• Watch for targeted phishing emails referencing Earth 2 — attackers weaponise breach data quickly.
• Check whether your email address appears in this breach on haveibeenpwned.com.