[Investigating][Severity: Critical][Intrusion]

H2INT: break-in at the DIRECT GAMES PC game store leaked members' email addresses, encrypted passwords and order histories

The DIRECT GAMES PC game key store was broken into on 17 and 18 October, leaking members' email addresses, encrypted passwords, names and order histories.

Disclosed

2026-10-28

Organizations involved

Leaked or at risk

Unknown

Downtime

Unknown

What happened

2026-10-17
DIRECT GAMES was accessed without authorization over this day and the next. [1]
2026-10-18
A leak of member data was confirmed, and traffic from the attacker was blocked. [1]
2026-10-28
Disclosed. [1]

Impact

The leaked data are member IDs (email addresses), login passwords in encrypted form, birth dates, names in kanji and kana, and order histories. The number of members has not been published. Card numbers are not held, so they are not included. Birth dates and names were optional fields and may not be real. [1]

Response

The system was fixed and every member is asked to reset their password. A task force was set up and the Personal Information Protection Commission was informed. The cause will be investigated with outside experts. Members who reuse the password elsewhere are urged to change it there too. [1]