iRacing: 270000 Trading Paint Accounts Exposed

Things We’d Rather Not Talk About 🙁

Details of 270,000 Trading Paints users have been leaked on the internet. Trading Paints is the parallel skins application to iRacing. The leaked details include login credentials and passwords in MD5 hash format. If you use the same set of credentials elsewhere, change them immediately.

We were alerted on Twitter yesterday that user data from Trading Paints was being sold on a questionably legitimate website. The accuracy of this data was verified by iRacing’s staff. While we awaited official confirmation, many had already taken action to change their passwords. The MD5 hash used to store the password cannot be decrypted but can be checked against a dictionary. Therefore, if it’s a commonly used word, that combination might be deciphered sooner than later.

Later, Trading Paints provided official confirmation, essentially urging users to do the same: change passwords on sites where the same user-password combination is used and reset the password in the future on Trading Paints.