Dota 2 forums reportedly hacked, usernames and passwords exposed
Hacked data set reportedly contains 1,923,972 records.
Keep up to date with the most important stories and the best deals, as picked by the PC Gamer team.
You are now subscribed
Your newsletter sign-up was successful
Want to add more newsletters?
Every Friday
GamesRadar+
Your weekly update on everything you could ever want to know about the games you already love, games we know you're going to love in the near future, and tales from the communities that surround them.
Every Thursday
GTA 6 O'clock
Our special GTA 6 newsletter, with breaking news, insider info, and rumor analysis from the award-winning GTA 6 O'clock experts.
Every Friday
Knowledge
From the creators of Edge: A weekly videogame industry newsletter with analysis from expert writers, guidance from professionals, and insight into what's on the horizon.
Every Thursday
The Setup
Hardware nerds unite, sign up to our free tech newsletter for a weekly digest of the hottest new tech, the latest gadgets on the test bench, and much more.
Every Wednesday
Switch 2 Spotlight
Sign up to our new Switch 2 newsletter, where we bring you the latest talking points on Nintendo's new console each week, bring you up to date on the news, and recommend what games to play.
Every Saturday
The Watchlist
Subscribe for a weekly digest of the movie and TV news that matters, direct to your inbox. From first-look trailers, interviews, reviews and explainers, we've got you covered.
Once a month
SFX
Get sneak previews, exclusive competitions and details of special events each month!
Dota 2's official forums were reportedly hacked on July 10, with nearly 2 million records accessed. These include email addresses, usernames and passwords, and IP addresses, according to leak notification site Leaked Source.
According to that site, passwords on the vBulletin forum "were stored using MD5 hashing and a salt". MD5 hashing is widely considered an outdated and ineffective form of data protection, and according to Leaked Source, over 80% of the hacked passwords can be converted to their plaintext value.
Leaked Source lists the different email hosts that have been compromised, with Google a huge majority at 1,086,139. "A lot" of those are disposable email addresses, but the report doesn't specify how many. Whatever the case, if you use the forums, it's probably best to change your password, and to then check whether you're listed on the Leaked Source website.
Valve has yet to comment, but we'll reach out. Cheers to ZDnet for the heads up.
Keep up to date with the most important stories and the best deals, as picked by the PC Gamer team.

Shaun Prescott is the Australian editor of PC Gamer. With over ten years experience covering the games industry, his work has appeared on GamesRadar+, TechRadar, The Guardian, PLAY Magazine, the Sydney Morning Herald, and more. Specific interests include indie games, obscure Metroidvanias, speedrunning, experimental games and FPSs. He thinks Lulu by Metallica and Lou Reed is an all-time classic that will receive its due critical reappraisal one day.

