2026 PokemonGym.nl — 888 forum dump claim; 19,600 users + private messages (unverified)
Data compromised
Actor-claimed ~19,600 unique users: usernames, emails, IPs, age, gender, country, Argon2id password hashes, plus full private-message text — unverified
Technical writeup
Unverified leak-site / forum claim — observed July 23, 2026 by Dark Web Informer. Actor “888” claimed a July 2026 breach of Dutch Pokémon RPG PokemonGym.nl exposing about 19,600 users plus the private-messaging table in full text. Password samples used Argon2id. Site had not publicly confirmed. BreachHistory indexes 19,600 per the actor count, labeled unverified.
Root cause
Unverified underground forum claim by actor “888” alleging PokemonGym.nl database and private-message table published — site had not confirmed at indexing time