Cyber Incident Victim: Internet Game Cars Database
Date:
Dec 2015
Location:
United Kingdom
Summary
A threat actor using the alias "Rubber" compromised the Internet Game Cars Database (IGCD), exposing data from 1,577 users including usernames, encrypted passwords, email addresses, and login numbers. The breach was part of a broader campaign targeting multiple websites, with compromised credentials from other platforms demonstrating vulnerabilities such as weak password encryption and plaintext storage. The gaming site's data was publicly dumped alongside leaks from unrelated domains, though the specific decryption status of IGCD passwords remained unspecified. This incident highlighted systemic security failures across various online services, with the attacker routinely publishing stolen information without immediate organizational remediation.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
The Internet Game Cars Database (IGCD.net) was compromised as part of a broader hacking campaign conducted by an individual using the Twitter handle "@smitt3nz," also identified as "Rubber," between approximately September and December 2015. The attacker breached IGCD's systems and exfiltrated data from 1,577 user accounts. The stolen dataset included usernames, encrypted passwords, email addresses, and login numbers associated with user profiles. This breach was publicly disclosed via Twitter alongside multiple other website compromises, with the dumped data remaining accessible in online pastes at the time of DataBreaches.net's reporting on December 7, 2015. No specific technical details regarding the attack vector or intrusion methods were disclosed in available sources.
The IGCD incident occurred within a concentrated wave of attacks targeting at least 17 websites across diverse sectors, including gaming communities, art platforms, municipal libraries, and marriage services. Impacted organizations exhibited varying security postures, with some storing passwords in crackable formats like unsalted MD5 hashes or plain text, though IGCD's passwords were encrypted. The attacker systematically leaked credentials, including administrative accounts for several dating sites, amplifying risks of secondary compromises. DataBreaches.net noted attempts to notify two unspecified entities but did not confirm outreach to IGCD. No public statements, remediation efforts, or containment actions by IGCD were documented in the source material. The persistence of exposed credentials in public pastes indicated prolonged data availability, though IGCD's operational status post-breach was not reported. User impacts included potential credential-stuffing attacks and privacy violations due to exposed email associations with gaming accounts.