Every public data breach

44 disclosed this week · 26,355 on record

Cross Fire

Disclosed Dec 28, 201612,865,609 accountsUnverified

In August 2016, the Russian gaming forum known as Cross Fire (or cfire.mail.ru) was hacked along with a number of other forums on the Russian mail provider, mail.ru. The vBulletin forum contained 12.8 million accounts including usernames, email addresses and passwords stored as salted MD5 hashes.

What is known

People affected12,865,609 (accounts in the leaked data, per Have I Been Pwned)
DisclosedDec 28, 2016
HappenedAug 8, 2016
AttackHacking
Data exposedEmailsPasswords
SectorTech
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Check your emailHave I Been Pwned

Sources

Notices filed

History of this record
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about Cross Fire