Facepunch
forum.facepunch.com
About This Breach
Facepunch Studios is a video game development company that operates an online community forum for gamers. In 2016, the Facepunch forum suffered a data breach that exposed the personal information of over 340,000 users, including email addresses, usernames, IP addresses, and hashed passwords. The breach was discovered when a database containing the stolen information was found for sale on a dark web marketplace.
Data Exposed
Breach Details
| Breach Type | Data Breach |
| Searchable | Yes |
| Verified | Yes |
| Sensitive Data | No |
| Reference | https://news.softpedia.com/news/information-of-396k-users-exposed-in-facepunch-data-breach-523291.shtml (opens in new tab) |
Frequently Asked Questions
When did the Facepunch data breach happen?
Facepunch was breached in Jun 2016. The breach was added to the XposedOrNot index on November 8, 2023.
How many records were exposed in the Facepunch breach?
342,770 records were exposed, making it the #580 largest of the 794 breaches in our index.
What data was exposed in the Facepunch breach?
The exposed data includes: Usernames, Email addresses, Passwords, Dates of birth, IP addresses.
What should I do if I was affected by the Facepunch breach?
Change your password on Facepunch and anywhere you reused it, and make the new one long and unique. Turn on two-factor authentication, and set up free breach alerts on XposedOrNot so you know the moment your email appears in a new breach.
More Entertainment Breaches
What Should You Do?
Change Your Passwords
Passwords were stored with weak protection and are likely cracked. Change it now on Facepunch and anywhere you reused it. Make the new one long and unique.
Enable Two-Factor Authentication
Add 2FA on all supported accounts using an authenticator app like Google Authenticator or Authy.
Review Device Security
Update your devices and browsers, and check for unauthorized logins.
Monitor Your Accounts
Set up login alerts and review account activity regularly for suspicious access.
Use a Password Manager
Never reuse passwords: use a password manager to generate unique ones for each account.