medium severity November 28, 2017 · 1 min read

Open CS:GO Data Breach (2017)

If you are a customer of Open CS:GO, here’s what’s now in circulation.

In December 2017, the website for purchasing Counter-Strike skins known as Open CS:GO (Counter-Strike: Global Offensive) suffered a data breach (address since redirects to dropgun.com). The 10GB file contained an extensive amount of personal information including email and IP addresses, phone numbers, physical addresses and purchase histories. Numerous attempts were made to contact Open CS:GO about the incident, however no responses were received.

What the free scan actually returns

Sample resultyou@email.comIllustrative — not a real person

Found on people-search siteswe remove these

These listings are live, public, and legal to remove — and removing them is what we do.

value redacted in this sampleage, relatives, address historySpokeo

value redacted in this samplephone, household, property recordsBeenVerified

value redacted in this sample582 companies checked

Found in breach recordsverifiedreported — unverified

Each record is labeled: confirmed breach data, or an attacker’s claim no one has verified.

verifiedvalue redacted in this samplepassword + phone · 2024telecom breach

unverifiedvalue redacted in this sampleclaimed in ransomware listing · 2026leak-site claim

Leaked data cannot be deleted from the internet — anyone claiming otherwise is lying. Broker listings can be removed. We do the second, and show you exactly what to fix from the first.

Were you a Open CS:GO customer?

Open CS:GO is one listing. Your email is probably in others.

512K accounts were exposed here. Check whether yours is one — and find every other leak tied to the same address, in about 15 seconds. No account, no card.

Report details & sourcing

Severity Medium contact details only, none of them permanent

Disclosed November 28, 2017

Last reviewed July 22, 2026

Affected 512K

Data exposed AvatarsEmail addressesIP addressesPhone numbersPhysical addressesPurchasesSocial media profilesUsernames

By GalaxyWarden Threat Research · Editorial & sourcing standards

Editorial & sourcing policy

GalaxyWarden is a breach-monitoring service and news aggregator. We do not exfiltrate, host, purchase, or redistribute stolen data. Breach information is compiled from publicly accessible sources and threat-intelligence platforms, and is reported as claims attributed to their source. We promptly correct or remove material shown to be inaccurate — see our content & takedown policy or write to support@galaxywarden.com.

Sources: Have I Been Pwned

Related breaches

high October 26, 2017

Open CS:GO Data Breach (2017)

Found on people-search siteswe remove these

Found in breach recordsverifiedreported — unverified

Report details & sourcing

Related breaches

MyHeritage — 92 Million Genealogy Accounts, Found by a Researcher Seven Months Later (2017)

PT. Bank Perekonomian Rakyat Bintan NEW Listed by Coinbase Cartel Ransomware Group

../Rctrav Listed by The Gentlemen Ransomware Group