A new report from Kaspersky reveals that over 11 million gaming account credentials were leaked worldwide in 2024. The findings were shared during the company’s Cyber Security Weekend in Vietnam.
Steam was the hardest hit, with 5.7 million accounts compromised. Another 6.2 million accounts were leaked from platforms like Epic Games Store, Battle.net, Ubisoft Connect, GOG, and the EA app.
The leaks were caused by infostealer malware, a malicious software that hides in cracked games, cheat tools, and unofficial mods. Once installed, it collects passwords, credit card details, and other sensitive data. This stolen information is then sold or shared on the dark web.
The Asia-Pacific region was one of the most affected. Thailand had the highest number of leaked Steam credentials at 163,000, followed by the Philippines with 93,000, and Vietnam with 88,000. In contrast, China, Sri Lanka, and Singapore were the least affected, with approximately 19,000, 11,000, and 4,000 compromised accounts, respectively.
Kaspersky warns that the real number of compromised accounts may be even higher. Stolen credentials usually appear on dark web forums months or years after the original breach.
Experts recommend running security scans, changing passwords regularly, and avoiding reuse across platforms.
Featured image from Unsplash






