NexusMods Data Breach and Leak (July 2013)

nexusmods.com

5,917,780
Exposed Records
Jul 2013
Breach Date
13 years ago
Easy to Crack
Password Risk
Entertainment industry
Entertainment
Industry
Added to XposedOrNot on November 8, 2023 · #188 of 796 breaches by records exposed

About This Breach

NexusMods, a popular game modification site with close to 6 million registered members, suffered a data breach in 2013. The potentially exposed data includes members' email addresses, password hashes, and salts.

Data Exposed

Usernames
Email addresses
Passwords

Breach Details

Breach Type Data Breach
Searchable Yes
Verified Yes
Sensitive Data No
Reference https://www.nexusmods.com/news/14178 (opens in new tab)

How this data is sourced and verified

Frequently Asked Questions

How do I check if I was in the NexusMods breach?

Type your email address into the search box on our data breach check page. If it appears in the NexusMods breach, or any other, you'll see the breach name, date and what was exposed. It's free and nothing you type is stored.

When did the NexusMods data breach happen?

NexusMods was breached in Jul 2013. The breach was added to the XposedOrNot index on November 8, 2023.

How many records were exposed in the NexusMods breach?

5,917,780 records were exposed, making it the #188 largest of the 796 breaches in our index.

What data was exposed in the NexusMods breach?

The exposed data includes: Usernames, Email addresses, Passwords.

What should I do if I was affected by the NexusMods breach?

Change your password on NexusMods and anywhere you reused it, and make the new one long and unique. Turn on two-factor authentication, and set up free breach alerts on XposedOrNot so you know the moment your email appears in a new breach.

What Should You Do?

Urgent

Change Your Passwords

Passwords were stored with weak protection and are likely cracked. Change it now on NexusMods and anywhere you reused it. Make the new one long and unique.

High Priority

Enable Two-Factor Authentication

Add 2FA on all supported accounts using an authenticator app like Google Authenticator or Authy.

Recommended

Monitor Your Accounts

Set up login alerts and review account activity regularly for suspicious access.

Best Practice

Use a Password Manager

Never reuse passwords: use a password manager to generate unique ones for each account.