Reality Squared Games

R2Games, also known as Reality Squared Games, is a Chinese company that publishes and operates a portfolio of online games designed primarily for web browsers. The firm concentrates on free-to-play offerings, providing MMORPGs, strategy titles, and casual games that users can access without installing a dedicated client. Through its central game portal, players can create accounts, launch games, and engage with community features such as forums, chat rooms, and leaderboards. The company monetizes these games mainly through optional in‑game purchases, allowing users to acquire virtual items or premium content. Its distribution network spans multiple continents, making the games available to an international audience that includes players from North America, Europe, and Asia.

R2Games’ distinguishing attribute is its focus on web‑based gaming, which sets it apart from publishers that rely on traditional PC or console distribution models. By emphasizing games that run directly in a browser, the company lowers the barrier to entry for players who prefer not to download large files or maintain separate gaming clients. The underlying technology typically relies on HTML5 or legacy Flash frameworks to deliver graphics and gameplay. However, security researchers have pointed out that the company’s web infrastructure, particularly the forum software supporting its community portals, has been outdated and susceptible to known exploits, creating a mismatch between its game development strengths and its site maintenance practices.

On April 1, 2017, R2Games experienced a second security compromise that exposed over one million user accounts. The breach affected forum and website data across several regions, compromising usernames, email addresses, IP addresses, passwords stored in weak hashes or plaintext, and optional personal details such as instant messenger IDs and Facebook access tokens. Independent verification of the leaked information confirmed the validity of more than 540,000 unique email addresses, which were subsequently added to public breach repositories. Although the company had previously denied an earlier incident affecting millions of users, it did not respond to inquiries regarding this latest event, prompting criticism from security observers who cited repeated failures to address vulnerabilities and to update vulnerable software components.

The company’s headquarters is situated in China, reflecting its origins and primary operational base within the country’s technology sector.