What was exposed, when it happened, and which databases confirm it.
- accounts
- 26,811,732
- Breached
- August 8, 2016
- Last Update
- December 28, 2016
Were you caught in this breach?
Search your email, phone number or username against every record CheckLeaked indexes.
Your address never leaves this page: it is hashed in your browser and only a short fragment of that hash is sent.
What happened
In August 2016, the Russian gaming forum known as Cross Fire (or cfire.mail.ru) was hacked along with a number of other forums on the Russian mail provider, mail.ru. The vBulletin forum contained 12.8 million accounts including usernames, email addresses and passwords stored as salted MD5 hashes.
Compromised Info
- Email addresses
- Passwords
- Usernames
Attestation
Four independent databases catalog this breach and they do not always agree. Each lane below is one source’s own count.
18,696 accounts DEHASHED reports beyond HIBP
Sources & Link Methods
- LeakCheck— linked via automatic string matching
- Dehashed— linked via AI direct match to LeakCheck (95% confidence)
- HIBP
FAQ
What was leaked in the CrossFire breach?
The CrossFire breach exposed: Email addresses, Passwords, and Usernames.
When did the CrossFire breach happen?
The CrossFire breach was disclosed on August 8, 2016 and affected 26,811,732 records.
Am I affected by the CrossFire breach?
Search your email, phone or username at checkleaked.cc to find out whether your data appears in the CrossFire leak.