Planet Ice Data Breach (2023)

On January 14, 2023, UK ice-skating venue operator Planet Ice appeared in a public breach listing that confirmed the exposure of personal records belonging to 240,000 people. The incident, which occurred in 2023, involved customer data including names, email addresses, physical addresses, phone numbers, dates of birth, genders, IP addresses, purchase history, and passwords stored as MD5 hashes. The compromised information also contained the names, genders, and dates of birth of children who had attended parties at the venues.

Reported Details from the Disclosure

The primary disclosure on Have I Been Pwned states that the Planet Ice breach exposed the eight categories of data listed above for approximately 240,000 individuals. The notification does not specify the exact attack vector, the date the breach occurred, or whether a ransomware group claimed responsibility. It confirms that passwords were stored using the outdated and crackable MD5 hashing algorithm, making them vulnerable to offline brute-force attacks. The listing also notes that records for children were included, specifically their names, genders, and dates of birth tied to party bookings.

Why This Matters for You and Your Family

If you or your children have ever booked ice-skating sessions, parties, or lessons at a Planet Ice venue, your personal information and possibly your family members’ details may now be circulating among criminals. Dates of birth, phone numbers, and physical addresses are frequently used to impersonate victims, open fraudulent accounts, or carry out targeted phishing. The presence of MD5-hashed passwords means that any password you reused across other sites could be cracked and used to compromise your email, banking, or social media accounts. For families, the exposure of children’s names, genders, and dates of birth creates long-term risks because this data never expires and can be combined with future breaches to build detailed profiles.

Doxxing and Identity-Chain Risks

Once names, addresses, phone numbers, and email addresses are public, attackers can link them to usernames, gaming handles, and social-media profiles. This creates an identity chain that leads to doxxing, swatting, or extortion. Children’s party records are particularly valuable because they tie a minor’s identity to a parent’s contact details and home address. Credential leaks of this type frequently cascade into account takeovers on gaming platforms, where stolen passwords grant access to children’s profiles that contain additional personal information and payment methods. The combination of adult and child data from a single breach significantly expands the surface area for identity theft and harassment that can affect the entire household.

What to Do

• Run a DoxxScan to map every link between your emails, phone numbers, addresses, and online handles so you can see the full exposure chain created by this breach.
• Rotate any password you used on Planet Ice immediately wherever it has been reused, replace it with a unique passphrase, and enable 2FA using an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next time your data appears it is caught and addressed within hours rather than months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts which often chain back to the same breached address or parent email.
• Let remediation specialists handle takedown requests for any exposed personal records appearing on data-broker and people-search sites that surfaced after this incident.

The Planet Ice breach illustrates how even seemingly routine leisure-service providers hold information that can fuel identity crimes and doxxing campaigns for years. Because the stolen data includes both adult and child records, the exposure is likely to surface in future campaigns that combine multiple breaches. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping that connects handles to real identities, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts at risk of takeover from credential leaks like this one. Starting proactive defense now limits the damage that can be done with data that is already circulating.