Skip to content

gPotato

Disclosed Sep 24, 201610 years ago2,136,520 accountsUnverified

In July 2007, the multiplayer game portal known as gPotato (link to archive of the site at that time) suffered a data breach and over 2 million user accounts were exposed. The site later merged into the Webzen portal where the original accounts still exist today. The exposed data included usernames, email and IP addresses, MD5 hashes and personal attributes such as gender, birth date, physical address and security questions and answers stored in plain text.

What is known

People affected2,136,520 (accounts in the leaked data, per Have I Been Pwned)
DisclosedSep 24, 2016
HappenedJul 12, 2007
AttackNot stated
Data exposedDates of birth, Emails, IP addresses, Names, Passwords, Addresses, Credentials and tokens
SectorTech
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Check your emailHave I Been Pwned

Sources

Source
Have I Been Pwned: gPotatohaveibeenpwned.com · Aggregator

Notices filed

WhereFiledPeople
Have I Been Pwnedaccounts in the dataSep 24, 20162,136,520
History of this record
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about gPotato

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.