Loading...

Atlas Menu Breach Exposes 64,000 GTA V and CS2 Cheat Service Users

A data breach of Atlas Menu, a cheat service for GTA V and CS2, exposed 64,000 user accounts including emails, IPs, support tickets, and bcrypt-hashed passwords, risking targeted phishing and harassment.
Screenshot of a forum post advertising the Atlas Menu database. The post references a May 2026 breach of the GTA V and CS2 cheat service Atlas Menu and claims approximately 64,000 user records were exposed. The listing states the dataset contains email addresses, usernames, IP addresses, support ticket information, and bcrypt password hashes. Sample filenames are shown while the underlying data remains hidden behind a forum access restriction.
Forum post referencing the Atlas Menu breach, which reportedly exposed approximately 64,000 user accounts associated with the GTA V and CS2 cheat service. The listing claims the leaked database contains email addresses, usernames, IP addresses, support ticket data, and bcrypt password hashes.

Atlas Menu, a cheat service used by players of Grand Theft Auto V and Counter-Strike 2, has reportedly suffered a data breach exposing approximately 64,000 user accounts after an attacker allegedly gained access to the company’s systems and published the database online.

The incident was publicly documented by Have I Been Pwned and independently verified by cybersecurity firm UpGuard. According to the breach information, the exposed dataset contains approximately 64,000 unique user records associated with Atlas Menu’s services.

The Atlas Menu website was unavailable at the time the breach became public. Atlas Menu had not issued any public statement at time of publication.

Database reportedly published online

According to publicly disclosed reporting, the threat actor allegedly uploaded the stolen database to a public GitHub repository following the compromise.

The exposed records reportedly include usernames, email addresses, IP addresses, customer support tickets, and passwords stored as bcrypt hashes.

While bcrypt remains one of the more secure password hashing algorithms, weak passwords can still be vulnerable to cracking attempts over time. Users who reused Atlas Menu credentials on other services could face additional risk if passwords are eventually recovered.

Support tickets increase exposure risk

One of the more significant aspects of the incident is the reported exposure of customer support ticket data.

Support conversations often contain troubleshooting details, account information, payment references, and other contextual information that can help attackers craft convincing phishing messages or social engineering attacks.

Researchers noted that the combination of email addresses, IP addresses, and support records could potentially allow threat actors to conduct highly targeted campaigns against affected users.

Cheat service users may face additional scrutiny

Unlike many consumer data breaches, the affected population in this case reportedly consists of users of game cheating software.

Exposure of customer records associated with cheat services can create unique risks beyond traditional credential theft. Users may face reputation concerns, account enforcement actions, targeted harassment, or attempts at extortion by malicious actors seeking to leverage knowledge of their activity.

The breach also highlights the broader security risks associated with third-party gaming tools that often require elevated privileges, direct system access, or extensive account information from their users.

What affected users should do

Anyone who maintained an Atlas Menu account should consider changing passwords associated with the service and any other accounts that reused the same credentials.

Users should also enable multi-factor authentication where available and remain alert for phishing emails referencing Atlas Menu purchases, support requests, or account activity.

The breach serves as another reminder that online gaming services, including unofficial tools and cheat platforms, remain attractive targets for attackers seeking access to large collections of user data.

Picture of m00s3c

m00s3c

Moose (@m00s3c) is the author of BreachNews, focusing on data breach intelligence, dark web monitoring, and threat analysis. His work involves analyzing breach claims, reviewing leaked datasets, and tracking threat actor activity to provide clear, factual reporting.

Related Posts

Newsletter signup

Get the latest data breach and security news.

Please wait...

Thank you for signing up!

BREACHNEWS.COM

Support Independent News.

Help support breach monitoring, investigations, infrastructure, and reporting.

Support the site