Skip to content
Breaches.

R2

Disclosed Feb 9, 201610 years ago22,281,337 accountsUnverified

In late 2015, the gaming website R2Games was hacked and more than 2.1M personal records disclosed. The vBulletin forum included IP addresses and passwords stored as salted hashes using a weak implementation enabling many to be rapidly cracked. A further 11M accounts were added to "Have I Been Pwned" in March 2016 and another 9M in July 2016 bringing the total to over 22M.

What is known

People affected22,281,337 (accounts in the leaked data, per Have I Been Pwned)
DisclosedFeb 9, 2016
HappenedNov 1, 2015
AttackHacking
Data exposedEmails, IP addresses, Passwords
SectorTech
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Check your emailHave I Been Pwned

Sources

Source
Have I Been Pwned: R2Gameshaveibeenpwned.com · Aggregator

Notices filed

WhereFiledPeople
Have I Been Pwnedaccounts in the dataFeb 9, 201622,281,337

Other breaches at R2

BreachAffected
Disclosed Apr 25, 2017Apr 25, 20179 years agoHackingUnverified1Macct
History of this record
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about R2

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.