EpicBot Data Breach

What happened

In September 2019, the RuneScape bot provider EpicBot suffered a data breach that impacted 817k subscribers. Data from the breach was subsequently shared on a popular hacking forum and included usernames, email and IP addresses and passwords stored as either salted MD5 or bcrypt hashes. EpicBot did not respond when contacted about the incident.

Exposed data

Recommended actions

• Change your EpicBot password immediately, and update it anywhere you reused the same password.
• Enable two-factor authentication on the affected account and on your critical services (email, banking).
• Watch for targeted phishing emails referencing EpicBot — attackers weaponise breach data quickly.
• Check whether your email address appears in this breach on haveibeenpwned.com.