Loading
Loading
We use strictly necessary cookies to run this site, and analytics cookies to understand how it's used. See our Privacy Policy for details.
Breach occurred 2016-07-01Verifiedonrpg.com
What happened
In July 2016, the now defunct free online games list website OnRPG suffered a data breach that was later redistributed as part of a larger corpus of data. The incident exposed just over 1M email and IP addresses alongside usernames and passwords stored as salted MD5 hashes.
Data exposed
Frequently asked questions
The OnRPG data breach occurred on July 1, 2016. It was added to Have I Been Pwned's breach catalog on May 8, 2025.
1,047,640 accounts were affected by the OnRPG data breach, according to Have I Been Pwned's records.
The OnRPG breach exposed the following data types: Email addresses, IP addresses, Passwords, Usernames.
Yes. Have I Been Pwned has verified the OnRPG breach, meaning there's confirmed evidence the exposed data is genuine and tied to real accounts.
Use KazaSec's free Email Breach Checker (/tools/breach-check) to check whether a specific email address has surfaced in the OnRPG breach, or any other known breach — the tool never stores what you search.
Our free Email Breach Checker tells you whether a specific email address has surfaced in this breach — or any other known breach — without ever storing what you search.
Check your email →Talk to us about this
We help organizations find and fix the gaps that lead to a breach, before they do.