ESEA hacked, leaking 1.5 million gamers' records
Up to 90 fields of data have been stolen, according to LeakedSource
The personal details of more than 1.5 million E-Sports Entertainment Association (ESEA) members have been stolen following a hack in December.
Information such as registration date, city, state (or province), last login, username, first and last name, bcrypt hash, email address, date of birth, zip code, phone number, website URL, Steam ID, Xbox ID, and PSN ID may have been obtained by the hackers according to breach notification service LeakedSource.
The organisation told its users about the hack shortly after it happened and then reminded them on 30 December before releasing a statement the day after LeakedSource announced the data had been stolen.
"Recently news has been made that ESEA's user data has been leaked online," ESEA said. "We expected something like this could happen but have not confirmed this is ESEA's data. We notified the community on December 30th, 2016 about the possibility this could happen. The type of data and storage standards was disclosed."
The security breach was part of a ransomware attack, according to LeakedSource. The hacker reportedly asked for $50,000 in payment and in exchange, they would help ESEA patch the vulnerability it used to break into the association's systems.
ESEA has not revealed whether it gave in and paid the hackers or just reset user passwords, multi-factor authentication tokens and security questions to protect their users' identities.
"We have been working around the clock to further fortify security and will bring our website online shortly when that next round is complete," the organisation said, adding, "this possible user data leak is not connected to the current service outage."
Sign up today and you will receive a free copy of our Future Focus 2026 report - the leading resource for IT decision-maker insight on priorities and investment areas in AI, security and more.

Clare is the founder of Blue Cactus Digital, a digital marketing company that helps ethical and sustainability-focused businesses grow their customer base.
Prior to becoming a marketer, Clare was a journalist, working at a range of mobile device-focused outlets including Know Your Mobile before moving into freelance life.
As a freelance writer, she drew on her expertise in mobility to write features and guides for ITPro, as well as regularly writing news stories on a wide range of topics.
-
Companies are still paying ransoms to cyber criminals despite official adviceNews A Proofpoint survey found evolving ransomware techniques and the use of AI is exacerbating the situation for victims
-
This one cyber crime group accounted for nearly a fifth of all ransomware attacks in JuneNews The Gentlemen, a ransomware a service operator, now accounts for 17% of published attacks
-
Working with the enemy: Ransomware negotiator-turned cyber criminal jailed after working with hackers to extort clientsNews Angelo Martino was supposed to be negotiating on behalf of victims, but was secretly working for ransomware operators
-
Hackers are posing as Interpol to target small businesses – here's what you need to knowNews Small businesses are warned to think twice before clicking on links
-
‘Every hour ransomware goes undetected drastically increases its potential blast radius’: Hackers are breaching networks and laying low for longer – and nearly half of firms don’t realize until data is stolenNews An ExtraHop survey found more intrusions are going undetected, leading to longer dwell times
-
Ransomware cartels are fragmenting into volatile splinter groups, warns Met Police cyber chiefNews Commoditized "cyber crime bazaars" and AI data mining are forcing law enforcement to rewrite its playbook
-
New ransomware threat group, The Gentlemen, has become one of the most active ransomware operators, accounting for 10% of all attacksNews NTT researchers warn that the RaaS group is leveraging SystemBC malware to establish covert tunnelling, evade detection, and support rapid lateral movement across enterprise environments
-
Instructure chose to a pay ransom following the Canvas cyber attack – research shows more than half of security leaders would follow suitAnalysis Opting to pay ransoms creates huge risks for enterprises – you’re relying on the word of criminals

