Dungeon Crusher Players Hit by Massive Data Leak Due to Misconfigured Database A misconfigured Elasticsearch instance exposed sensitive data belonging to players of Dungeon Crusher, a popular RPG game developed by Towards Mars. Cybernews researchers discovered the breach, which leaked 24.5 million in-game chat records, including timestamps and message content, alongside 198,000 web purchase records. Of the exposed purchase data, 151,000 records contained IP addresses, partial credit card numbers, email addresses, and purchase locations, while 20,000 records revealed transaction details, payment currencies, Steam IDs, and order/item IDs. An additional 65,500 records tied to mobile app store purchases were also compromised. The data was secured after researchers notified the company, though Towards Mars did not comment on the incident. Security experts warn that the exposed information could be weaponized for fraud, phishing, identity theft, and other cyberattacks. The breach underscores the risks of improperly configured databases in gaming and e-commerce platforms.