Go Ninja Data Breach

What happened

In December 2019, the now defunct German gaming website Go Ninja suffered a data breach that exposed 5M unique email addresses. The impacted data included usernames, email and IP addresses and salted MD5 password hashes. More than 4M of the email addresses appeared to have been generated as opposed to organically provided by the user.

Exposed data

Recommended actions

• Change your Go Ninja password immediately, and update it anywhere you reused the same password.
• Enable two-factor authentication on the affected account and on your critical services (email, banking).
• Watch for targeted phishing emails referencing Go Ninja — attackers weaponise breach data quickly.
• Check whether your email address appears in this breach on haveibeenpwned.com.