Unverified claim — June 30, 2026: Hackers are advertising an alleged 54 million-record GameStop customer database on an illicit marketplace, according to Cybernews. Researchers reviewed 86 published samples containing names, contact data, and purchase metadata—including rows with 2026 last-purchase dates. GameStop has not confirmed a breach at catalog time. German coverage framed the same listing as hackers offering millions of customer records (Datenleck).
What the listing claimed
The seller marketed more than 54 million records but published only 86 proof rows. Sample fields included:
- User IDs, full names, dates of birth
- Email addresses and phone numbers
- Home addresses and ZIP codes
- Account status and creation dates
- Last purchase dates—some appearing to reflect 2026 activity
Fresh purchase history makes phishing more convincing: scammers can reference real games, consoles, or order timing when impersonating GameStop support or delivery partners.
Why marketplace claims need skepticism
Cybernews noted that criminal sellers often exaggerate volume, recycle older leaks, or merge multiple sources. Without the full dataset—or a company notice—there is no way to confirm 54 million unique, current GameStop accounts. The 2026 timestamps in samples suggest at least partial freshness but do not prove corporate network intrusion versus a third-party vendor leak.
Risks if any portion is authentic
- Phishing and smishing citing real purchase history
- Account takeover if victims reuse passwords also exposed elsewhere
- Profiling scams targeting collectors and high-value buyers
Action items for GameStop shoppers
- Enable unique passwords and MFA on GameStop.com accounts.
- Skeptical of delivery/refund messages referencing plausible order details—verify inside the official app.
- Do not download alleged leak archives from forums.
- Wait for official notice before treating 54M as confirmed fact.
Canonical record: GameStop forum 54M claim 2026.