UPDATED 00:29 EDT / OCTOBER 14 2016

NEWS

Details of 33 million accounts stolen in Evony gaming hack

Online game company Evony LLC has been hacked as the records of over 33 million customers were exposed online.

Hacking source site LeakedSource made the discovery, finding account records for 33,407,472 users of Evony’s main game. They are believed to have been obtained in June, along with the records for an additional 938,000 members of its forums.

The data is said to include usernames, email addresses, unsalted MD5 and SHA-1 passwords and IP addresses. While the SHA-1 passwords are difficult to crack, the MD5-encrypted passwords can be easily decrypted and are nearly the same as being in unencrypted “cleartext.”

If that’s perhaps not bad enough, Evony is also said to let users sign in with Facebook Connect meaning that the stolen account details may include potentially millions of Facebook login details as well.

Evony (formerly known as Civony) is an online multi-player game set in the European medieval time period in which players take the role of a lord or lady, starting with a small town that must be built up over time by building items and developing resources. The company claims to currently have 18 million players in 167 countries and has a badge on its site claiming that it is certified “malware free” by Google.

At this point, Evony has made no public comment on the report.

Poor passwords

As we see time and time again when sites are hacked, people do not take password security seriously, with the most popular password in the hacked database 123456 appearing over 700,000 times. 123456789 and “password” also appeared on the list, along with google and qwerty. Yahoo accounts topped the email list, followed by Hotmail and Gmail.

If you are an Evony account user it’s recommended that you change your password immediately, and if you have connected to the game using your Facebook account you should also consider changing your Facebook account password as well. Should you wish to search if your username and password appears in the hack or in other hacks, use the search function at LeakedSource.

Image credit: Evony

Since you’re here …

… We’d like to tell you about our mission and how you can help us fulfill it. SiliconANGLE Media Inc.’s business model is based on the intrinsic value of the content, not advertising. Unlike many online publications, we don’t have a paywall or run banner advertising, because we want to keep our journalism open, without influence or the need to chase traffic.The journalism, reporting and commentary on SiliconANGLE — along with live, unscripted video from our Silicon Valley studio and globe-trotting video teams at theCUBE — take a lot of hard work, time and money. Keeping the quality high requires the support of sponsors who are aligned with our vision of ad-free journalism content.

If you like the reporting, video interviews and other ad-free content here, please take a moment to check out a sample of the video content supported by our sponsors, tweet your support, and keep coming back to SiliconANGLE.