R2

Disclosed Feb 9, 201622,281,337 accountsUnverified

In late 2015, the gaming website R2Games was hacked and more than 2.1M personal records disclosed. The vBulletin forum included IP addresses and passwords stored as salted hashes using a weak implementation enabling many to be rapidly cracked. A further 11M accounts were added to "Have I Been Pwned" in March 2016 and another 9M in July 2016 bringing the total to over 22M.

What is known

People affected	22,281,337 (accounts in the leaked data, per Have I Been Pwned)
Disclosed	Feb 9, 2016
Happened	Nov 1, 2015
Attack	Hacking
Data exposed	EmailsIP addressesPasswords
Sector	Tech
Status	Unverified: not yet confirmed by an official notice, a filing or the organization
Check your email	Have I Been Pwned

Sources

Aggregatorhaveibeenpwned.com

Have I Been Pwned: R2Games

Notices filed

Accounts in the dataFeb 9, 2016

Have I Been Pwned22,281,337 people

Other breaches at R2

Hacking breachHacking exposed emails and passwords.1.0M accountsTechUnverifiedApr 25, 2017

History of this record

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about R2