Powerbot Data Breach

What happened

In approximately September 2014, the RuneScape bot website Powerbot suffered a data breach resulting in the exposure of over half a million unique user records. The data contained email and IP addresses, usernames and salted MD5 hashes of passwords. The site was previously reported as compromised on the Vigilante.pw breached database directory.

Exposed data

Recommended actions

• Change your Powerbot password immediately, and update it anywhere you reused the same password.
• Enable two-factor authentication on the affected account and on your critical services (email, banking).
• Watch for targeted phishing emails referencing Powerbot — attackers weaponise breach data quickly.
• Check whether your email address appears in this breach on haveibeenpwned.com.