Skip to content
Data breachResolved

Nexus Mods data breach (2013)

In December 2015, the game modding site Nexus Mods released a statement notifying users that they had been hacked. They subsequently dated the hack as having occurred in July 2013 although there is evidence to suggest the data was being traded months in advance of that.

Victim
Nexus Mods
records
5.9M
SectorRetail

Imported from Have I Been Pwned — pending editorial review and translation to French. The summary below is machine-extracted; consult the source for details.

In 2013-07-22, Nexus Mods was affected by a data breach. Approximately 5,915,013 accounts were exposed. In December 2015, the game modding site Nexus Mods released a statement notifying users that they had been hacked. They subsequently dated the hack as having occurred in July 2013 although there is evidence to suggest the data was being traded months in advance of that.

Sources

  1. haveibeenpwned.comhttps://haveibeenpwned.com/PwnedWebsites#NexusMods
  2. nexusmods.comhttps://nexusmods.com

Related incidents

Data breachResolved

Mecho Download data breach (2013)

In October 2013, the (now defunct) downloads website "Mecho Download" suffered a data breach that exposed 438k records. Data from the vBulletin based website included email and IP addresses, usernames and passwords stored as salted MD5 hashes.

Victim
Mecho Download
Records
437.9K
Data breachResolved

imgur data breach (2013)

In September 2013, the online image sharing community imgur suffered a data breach. A selection of the data containing 1.7 million email addresses and passwords surfaced more than 4 years later in November 2017.

Victim
imgur
Records
1.7M
Data breachResolved

Yatra data breach (2013)

In September 2013, the Indian bookings website known as Yatra had 5 million records exposed in a data breach. The data contained email and physical addresses, dates of birth and phone numbers along with both PINs and passwords stored in plain text.

Victim
Yatra
Records
5.0M
Data breachResolved

Evite data breach (2013)

In April 2019, the social planning website for managing online invitations Evite identified a data breach of their systems. Upon investigation, they found unauthorised access to a database archive dating back to 2013.

Victim
Evite
Records
101.0M