Hacker steals data from 1.6 million accounts Clash of Kings forum

A hacker has hacked into the forum of the popular mobile game Clash of Kings and stolen the data of nearly 1.6 million accounts. The forum ran on an outdated version of the vBulletin software.

The stolen account information includes usernames, IP addresses, device IDs and session tokens. The salted hashes of passwords are also in the hands of the hacker, according to ZDNet, which was given access to the portion of the data. The database was put online by LeakedSource, to allow users to discover if their account is part of the hack.

The forum of the popular game from the Chinese company Elex ran a version of vBulletin from 2013, which allowed the hacker to exploit vulnerabilities that have since been found in the software. Elex apparently failed to update to a current secure version. The company has not yet commented on the hack. The Clash of Kings forum is now offline.