Posts: 17
Threads: 2
Joined: Dec 2023
Dec 05, 2023, 08:51 PM
(This post was last modified: Dec 05, 2023, 09:12 PM by anarchism.)
In 2014, an exploit in the password recovery flow on Mojang / Minecraft.net led to users scraping the original sign-up information of 35,847 "OG" accounts. In 2016, the data began circulating from a BuiltByBit (formerly MC-Market) user known as Glove. In 2017, the database was made public, and subsequently became available on paste sites like Pastebin.
The information provided here is accurate as long as the account received its name before 2014 (when this was breached), and also contains information to accounts that had not been paid for and were purged in 2015.
This data is in HIBP as a paste, however there is no proper breach accreditation or history provided. To the best of my knowledge, this data has never appeared on BreachForums or any prior sites.
Compromised Data - Emails, usernames
Size - 1.12Mb
Posts: 79
Threads: 11
Joined: Sep 2023
bro sample ??? This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason:
Promoting tg in stealer log section
Posts: 17
Threads: 2
Joined: Dec 2023
(Dec 05, 2023, 09:36 PM)Pantei Wrote: bro sample ???
List is sorted, so here's some of the first few, with non-premiums removed.
You may verify the contents of this using HIBP. They will all appear in the same pastes.
Posts: 19,939
Threads: 357
Joined: Jun 2023
(Dec 05, 2023, 11:16 PM)anarchism Wrote: (Dec 05, 2023, 09:36 PM)Pantei Wrote: bro sample ???
List is sorted, so here's some of the first few, with non-premiums removed.
You may verify the contents of this using HIBP. They will all appear in the same pastes.
[email protected] - it is in hibp, but not in this leak.
Same to:
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected] - Not in HIBP
Same to:
[email protected]
[email protected]
[email protected]
Based on this sample, we can already understand that this is very strange data and most of the mail is missing from the pastes uploaded to hibp.(For fans of the percentage ratio - 14 out of 17 or 82.35% of the emails from the sample are not related to the files to which this leak allegedly refers).
We still have 3 emails, which are still available in various pastes. This:
[email protected]
[email protected]
[email protected]
Here are the pastes and the number of lines in them, which each of the emails consists of:
[email protected]: Paste title Date Emails
[u]No title 9 Feb 2018, 01:17 2,512[/u]
No title 17 Feb 2018, 10:51 95
No title 19 Apr 2018, 04:40 1,384
No title 18 Nov 2019, 09:20 123
: Paste title Date Emails
No title 22 Jan 2017, 09:28 2,426
No title 17 Feb 2017, 03:49 2,428
No title 19 Jan 2018, 07:06 2,427
[u]No title 9 Feb 2018, 01:17 2,512[/u]
No title 17 Feb 2018, 10:51 95
: Paste title Date Emails
No title 17 Mar 2018, 21:47 1,177
No title 10 Jul 2018, 07:51 2,326
No title 10 Jul 2018, 07:52 2,326
No title 15 Oct 2018, 23:56 9,999
No title 1 Dec 2018, 04:20 822
ROBLOX 32k (Spaced Accs)
And we see that two emails really exist in the same paste (while the third email does not occur in any of these pastes). We look at the number and find with interest that the number of posts in the paste is only 2,512, while 35,847 posts are indicated here.
Now let's bring my miniature article to the end.Based on the sample I reviewed, it can be found that most of the posts are not related to each other in any way.The connection between the same paste was found in only two emails out of 18, and the number in the file is significantly different.Based on this, I can assume two options 1 and the most unlikely - the database is really authentic, but in this case the user will need to provide more evidence to confirm this.2 - the leak is partially genuine.That is, emails can really relate to Minecraft, but they could be obtained by banal bruteforce of accounts using a checker and then pulling usernames and emails from the checker logs (many of them write the username).3 - the base is fake and has nothing to do with minecraft.This, again, will require proof.Of all three options, I'm most inclined to the second one.In this regard, if within 24 hours you do not find more significant evidence of the reality of the leak, then it will be moved to Cracked accounts, like cropped logs from a checker or something like that.
If you or any of the users want to confirm/deny this, then reply to my comment and state your point of view.
Posts: 17
Threads: 2
Joined: Dec 2023
(Dec 06, 2023, 10:41 AM)Addka72424 Wrote: (Dec 05, 2023, 11:16 PM)anarchism Wrote: (Dec 05, 2023, 09:36 PM)Pantei Wrote: bro sample ???
List is sorted, so here's some of the first few, with non-premiums removed.
You may verify the contents of this using HIBP. They will all appear in the same pastes.
[email protected] - it is in hibp, but not in this leak.
Same to:
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected] - Not in HIBP
Same to:
[email protected]
[email protected]
[email protected]
Based on this sample, we can already understand that this is very strange data and most of the mail is missing from the pastes uploaded to hibp.(For fans of the percentage ratio - 14 out of 17 or 82.35% of the emails from the sample are not related to the files to which this leak allegedly refers).
We still have 3 emails, which are still available in various pastes. This:
[email protected]
[email protected]
[email protected]
Here are the pastes and the number of lines in them, which each of the emails consists of:
[email protected]:Paste title Date Emails
[u]No title 9 Feb 2018, 01:17 2,512[/u]
No title 17 Feb 2018, 10:51 95
No title 19 Apr 2018, 04:40 1,384
No title 18 Nov 2019, 09:20 123
Paste title Date Emails
No title 22 Jan 2017, 09:28 2,426
No title 17 Feb 2017, 03:49 2,428
No title 19 Jan 2018, 07:06 2,427
[u]No title 9 Feb 2018, 01:17 2,512[/u]
No title 17 Feb 2018, 10:51 95
Paste title Date Emails
No title 17 Mar 2018, 21:47 1,177
No title 10 Jul 2018, 07:51 2,326
No title 10 Jul 2018, 07:52 2,326
No title 15 Oct 2018, 23:56 9,999
No title 1 Dec 2018, 04:20 822
ROBLOX 32k (Spaced Accs)
Now let's bring my miniature article to the end.Based on the sample I reviewed, it can be found that most of the posts are not related to each other in any way.The connection between the same paste was found in only two emails out of 18, and the number in the file is significantly different.Based on this, I can assume two options 1 and the most unlikely - the database is really authentic, but in this case the user will need to provide more evidence to confirm this.2 - the leak is partially genuine.That is, emails can really relate to Minecraft, but they could be obtained by banal bruteforce of accounts using a checker and then pulling usernames and emails from the checker logs (many of them write the username).3 - the base is fake and has nothing to do with minecraft.This, again, will require proof.Of all three options, I'm most inclined to the second one.In this regard, if within 24 hours you do not find more significant evidence of the reality of the leak, then it will be moved to Cracked accounts, like cropped logs from a checker or something like that.
If you or any of the users want to confirm/deny this, then reply to my comment and state your point of view.
Hello, Adka.
This database is the data superset of which those pastes originated from (resulting in inconsistent line amounts in HIBP. Essentially, those pastes were parts of this list.
Below, there are 2 emails that I believe may help prove that this database comes from Mojang:
says: [email protected] - Minecraft-specific, 0 breaches on HIBP
older: [email protected] - Same thing
I can provide more proof privately, if you believe it's necessary, including other people verifying that it's accurate (one of which I know is a reputable member on here).
Posts: 19,939
Threads: 357
Joined: Jun 2023
(Dec 07, 2023, 06:59 AM)anarchism Wrote: (Dec 06, 2023, 10:41 AM)Addka72424 Wrote: (Dec 05, 2023, 11:16 PM)anarchism Wrote: (Dec 05, 2023, 09:36 PM)Pantei Wrote: bro sample ???
List is sorted, so here's some of the first few, with non-premiums removed.
You may verify the contents of this using HIBP. They will all appear in the same pastes.
[email protected] - it is in hibp, but not in this leak.
Same to:
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected] - Not in HIBP
Same to:
[email protected]
[email protected]
[email protected]
Based on this sample, we can already understand that this is very strange data and most of the mail is missing from the pastes uploaded to hibp.(For fans of the percentage ratio - 14 out of 17 or 82.35% of the emails from the sample are not related to the files to which this leak allegedly refers).
We still have 3 emails, which are still available in various pastes. This:
[email protected]
[email protected]
[email protected]
Here are the pastes and the number of lines in them, which each of the emails consists of:
[email protected]:Paste title Date Emails
[u]No title 9 Feb 2018, 01:17 2,512[/u]
No title 17 Feb 2018, 10:51 95
No title 19 Apr 2018, 04:40 1,384
No title 18 Nov 2019, 09:20 123
Paste title Date Emails
No title 22 Jan 2017, 09:28 2,426
No title 17 Feb 2017, 03:49 2,428
No title 19 Jan 2018, 07:06 2,427
[u]No title 9 Feb 2018, 01:17 2,512[/u]
No title 17 Feb 2018, 10:51 95
Paste title Date Emails
No title 17 Mar 2018, 21:47 1,177
No title 10 Jul 2018, 07:51 2,326
No title 10 Jul 2018, 07:52 2,326
No title 15 Oct 2018, 23:56 9,999
No title 1 Dec 2018, 04:20 822
ROBLOX 32k (Spaced Accs)
Now let's bring my miniature article to the end.Based on the sample I reviewed, it can be found that most of the posts are not related to each other in any way.The connection between the same paste was found in only two emails out of 18, and the number in the file is significantly different.Based on this, I can assume two options 1 and the most unlikely - the database is really authentic, but in this case the user will need to provide more evidence to confirm this.2 - the leak is partially genuine.That is, emails can really relate to Minecraft, but they could be obtained by banal bruteforce of accounts using a checker and then pulling usernames and emails from the checker logs (many of them write the username).3 - the base is fake and has nothing to do with minecraft.This, again, will require proof.Of all three options, I'm most inclined to the second one.In this regard, if within 24 hours you do not find more significant evidence of the reality of the leak, then it will be moved to Cracked accounts, like cropped logs from a checker or something like that.
If you or any of the users want to confirm/deny this, then reply to my comment and state your point of view.
Hello, Adka.
This database is the data superset of which those pastes originated from (resulting in inconsistent line amounts in HIBP. Essentially, those pastes were parts of this list.
Below, there are 2 emails that I believe may help prove that this database comes from Mojang:
says:[email protected] - Minecraft-specific, 0 breaches on HIBP
older:[email protected] - Same thing
I can provide more proof privately, if you believe it's necessary, including other people verifying that it's accurate (one of which I know is a reputable member on here). Hello, good.Please provide evidence privately to me at pm. If this is indeed a genuine leak, then I will try to raise the issue of its inclusion in the official one.Thank you in advance.
Posts: 2
Threads: 0
Joined: Dec 2023
Posts: 19,939
Threads: 357
Joined: Jun 2023
Bump.I'm still waiting for proof.
Posts: 17
Threads: 2
Joined: Dec 2023
(Dec 10, 2023, 11:52 AM)Addka72424 Wrote: Bump.I'm still waiting for proof.
DM'd. Should be sufficient. If it isn't, let me know. I'll be able to find more.
Posts: 27
Threads: 9
Joined: Jun 2023
I got a 2020 version of this. :3
|
