A database containing data on 18 million Minecraft players—including logins, emails, and password hashes—has been listed for sale on the darknet. The database is being offered on an underground marketplace, but the exact number of unique affected users has not yet been confirmed.

A sample of about 1,000 records confirmed some data

Researchers obtained a sample of approximately 1,000 records and verified that some of the information is genuine.

No signs of Mojang or Microsoft breach

At this time, there are no indications that Mojang or Microsoft's infrastructure has been compromised. The data may have been collected from individual Minecraft servers or aggregated from previous leaks.

Risk of phishing and attacks on other services

The stolen logins, emails, and password hashes could be used for phishing or to attempt unauthorized access to accounts on other services.