Skip to main content

Magic: The Gathering maker Wizards of the Coast suffers database breach

Wizards of the Coast, the company behind the popular trading card game Magic: The Gathering, revealed that it has suffered a database breach that exposed the data of hundreds of thousands of MTG Arena and Magic Online players.

According to an email sent to affected users, the security breach happened on November 14 after an internal database was inadvertently exposed. A database backup file was left in a public Amazon Web Services storage bucket, but it was not protected by a password.

Recommended Videos

“We believe this was an isolated incident related to a legacy database and is unrelated to our current systems. Based on our current investigation, we have no reason to believe that any malicious use has been made of the data,” Wizards of the Coast said in the email.

The database file contained the first and last name, email address, and passwords of 452,634 players of MTG Arena and Magic Online, plus 470 email addresses linked to Wizards of the Coast employees. The passwords, however, were cryptographically secured, which makes them very hard, but not impossible, to decipher. No payment or financial information was included in the database that suffered the security breach.

In TechCrunch’s review of the exposed data, the user accounts dated back to at least 2012, while some of the more recent ones are from mid-2018. The storage bucket was only taken offline when TechCrunch reached out to Wizards of the Coast, despite U.K. cybersecurity firm Fidus Information Security’s earlier attempt to contact the company.

Fidus’ director of research and development, Harriet Lester, told TechCrunch that it was “surprising in this day and age that misconfigurations and lack of basic security hygiene still exist on this scale, especially when referring to such large companies with a userbase of over 450,000 accounts.”

As a precaution, affected MTG Arena and Magic Online players are recommended to change their passwords over the next seven days. Afterward, Wizards of the Coast will manually reset the passwords. For MTG Arena players, resetting the password may be done through the official Wizards of the Coast website, while Magic Online players may initiate the process through the game’s client.

Aaron Mamiit
Aaron received an NES and a copy of Super Mario Bros. for Christmas when he was four years old, and he has been fascinated…
Metal Slug Tactics is an arcade reimagining worth playing on Game Pass
Key art for Metal Slug Tactics.

I was not expecting the Metal Slug franchise to transition to the strategy game genre as well as it did.

SNK’s classic action-platformer arcade series is a high-energy, bombastic shoot 'em up perfect for quick hits of destructive gaming goodness. Strategy games are inherently much slower-paced than Metal Slug typically was, so I wasn’t sure if Leikir Studio and Dotemu could effectively make the genre jump with this franchise. I’m happy to be proven wrong.

Read more
Stardew Valley is testing an exciting, experimental new multiplayer feature
Stardew Valley Multiplayer Fishing

The mobile versions of Stardew Valley are testing out an experimental new multiplayer feature.

First released in 2016, Stardew Valley is one of the most popular farming and life sims. Developer ConcernedApe has continuously updated the game since its launch, bringing it to new platforms like iOS and Android and adding important features. Multiplayer is one such feature that was added, although it wasn't available in the iOS or Android versions of the game until update 1.6. Now, players who know where to look can test Stardew Valley's experimental mobile multiplayer features.

Read more
How to play Stardew Valley multiplayer on mobile
Three Stardew Valley players visiting the Night Market.

Farming with friends in Stardew Valley is one of most relaxing ways to spend your day. While the game itself doesn't have cross-platform support, you can at least still play multiplayer with friends on the same platform. Well, any platform except for mobile. Before the 1.6 update, anyone playing the mobile version only had their villagers to keep them company, but now there's a way to invite your real friends to the farm. Using a hidden cheat code, you can now access an experimental mobile version of Stardew Valley. Here's how to test it out.

Read more