Nexus Mods Data Breach

What happened

In December 2015, the game modding site Nexus Mods released a statement notifying users that they had been hacked. They subsequently dated the hack as having occurred in July 2013 although there is evidence to suggest the data was being traded months in advance of that. The breach contained usernames, email addresses and passwords stored as a salted hashes.

Exposed data

Recommended actions

• Change your Nexus Mods password immediately, and update it anywhere you reused the same password.
• Enable two-factor authentication on the affected account and on your critical services (email, banking).
• Watch for targeted phishing emails referencing Nexus Mods — attackers weaponise breach data quickly.
• Check whether your email address appears in this breach on haveibeenpwned.com.