In January 2016, hackers obtained user data from Lifeboat, an independent multiplayer community for Minecraft Pocket Edition. Have I Been Pwned lists 7,089,395 affected accounts. The breach involved Lifeboat credentials—not every Minecraft account—and the exposed data included email addresses, usernames, and passwords stored as unsalted MD5 hashes.
What happened in the Lifeboat hack?
Lifeboat was a third-party multiplayer community serving Minecraft Pocket Edition, the mobile edition of Minecraft. Contemporary accounts say attackers obtained its user database in early January 2016. Mozilla Monitor records the breach date as January 1, 2016.
| # | Preview | Product | Price | |
|---|---|---|---|---|
| 1 |
|
Minecraft - Nintendo Switch | $29.83 | Buy on Amazon |
| 2 |
|
Minecraft: Switch Edition | $32.65 | Buy on Amazon |
| 3 |
![Minecraft - Nintendo Switch [Digital Code]](https://m.media-amazon.com/images/I/51PIew9m20L._SL160_.jpg)
|
Minecraft - Nintendo Switch [Digital Code] | $29.88 | Buy on Amazon |
| 4 |
|
Minecraft Legends Deluxe Edition | $49.00 | Buy on Amazon |
| 5 |
|
Minecraft - Nintendo Switch | $34.32 | Buy on Amazon |
The incident was limited to Lifeboat’s database. It was not a breach of all Minecraft accounts or a report that every Minecraft player was affected.
How many accounts were affected, and what information was exposed?
Have I Been Pwned lists 7,089,395 affected accounts; its breach index records the incident as added in April 2016. The exposed fields were email addresses, usernames, and passwords. The passwords were reportedly stored as unsalted MD5 hashes, rather than readable text.
#1 Best Overall
- Minecraft is a game about placing blocks and going on adventures
- Explore randomly generated worlds and build amazing things from the simplest of homes to the grandest of castles
- Play in creative mode with unlimited resources or mine deep into the world in survival mode, crafting weapons and armor to fend off the dangerous mobs
- Play on the go in handheld or tabletop modes
- Includes Super Mario Mash-Up, Natural Texture Pack, Biome Settlers Skin Pack, Battle & Beasts Skin Pack, Campfire Tales Skin Pack; Compatible with Nintendo Switch only
A hash is a transformed representation of a password, not the password itself. But unsalted MD5 is a weak password-storage method: attackers can test likely passwords against stolen hashes, making recovery of some original passwords practical. The exposure therefore mattered even if the database did not contain passwords in plain text.
Was your Minecraft Pocket Edition password exposed?
The available breach records identify Lifeboat accounts, not Minecraft accounts generally. If you had a Lifeboat account, its email address, username, and password were among the types of information exposed. That does not establish that your password was successfully cracked, but it should be treated as compromised—especially if you used it on another service.
Rank #2
- Explore randomly-generated worlds and build amazing things from the simplest of homes to the grandest of castles
- Play in Creative Mode with unlimited resources or mine deep into the world in survival mode, crafting weapons and armour to fend off the dangerous mobs
The incident happened in 2016, so the current risk depends on what credentials you still use. A password changed long ago and never reused elsewhere presents a different risk from one that remains active on email, social, shopping, or financial accounts.
Why was Lifeboat’s response criticized?
Reports said Lifeboat reset passwords quietly over several weeks instead of notifying users when the breach occurred. A representative was quoted by Bitdefender as saying, “We did this over a period of some weeks.” Troy Hunt criticized the lack of disclosure, arguing that users needed to know to change the same password on other services. A reset on Lifeboat alone could not protect accounts elsewhere where a person had reused that credential.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Rank #3
- Minecraft is a game about placing blocks and going on adventures
- Explore randomly generated worlds and build amazing things from the simplest of homes to the grandest of castles
- Play in creative mode with unlimited resources or mine deep into the world in survival mode, crafting weapons and armor to fend off the dangerous mobs
- Play on the go in handheld or tabletop modes
- Includes Super Mario Mash-Up, Natural Texture Pack, Biome Settlers Skin Pack, Battle & Beasts Skin Pack, Campfire Tales Skin Pack; Compatible with Nintendo Switch only
What to do if you had a Lifeboat account
- Replace any reused password. Change it on every account where you used the Lifeboat password, starting with your email account and other important services. Change it directly on each service rather than merely changing it on Lifeboat.
- Use a unique password for each account. Make each replacement strong and different from your other passwords. A password change does not help if the new password is reused elsewhere.
- Use a password manager. Mozilla Monitor recommends one as a way to create and keep track of unique passwords, reducing the temptation to reuse a single credential.
- Check the email address associated with Lifeboat. A breach-notification service such as Mozilla Monitor can help you check whether that address appears in known breaches. A result can identify known exposure; it cannot prove that an account was never compromised.
What the incident means today
The breach is historical, but its main security lesson still applies if the Lifeboat password was reused and remains in use on another account. The central issue is not that all Minecraft players were affected; it is that one community’s exposed credential could put a person’s other accounts at risk through password reuse.
Quick Recap
Best Value
Rank #4
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
