LeagueSpy

In December 2020 the LeagueSpy sports information platform suffered a data breach that exposed the personal information of approximately 159 thousand users. The incident involved the unauthorized access and disclosure of the sites database containing sensitive member details. The leaked data included email addresses, IP addresses, and usernames. Passwords were also compromised, which were stored as PHPBB hashes. This security failure allowed attackers to gain a significant amount of user data suitable for credential stuffing and phishing attacks.