Coupon Mom / Armor Games 2014 Data Breach
ObscureIQ Breach Intelligence
Moderate SeverityWebsite / service breach
Coupon Mom Savings Platform Exposure (2014): 11 Million Accounts :: Misattributed File, Both Coupon Mom & Armor Games Data Found to Be Non-Matching
Aggregated user records from multiple attributed sources.
Verified by ObscureIQ Intelligence
45/100Breach Risk Index
17Data Value
25Market Recency
584dSince Breach
Breach Intelligence Summary
Entity: Coupon Mom / Armor Games · Actor: Unknown · Sources: 6 references
Attack: Unknown
Profile: Breach Compilation · Aggregated user records from multiple attributed sources · Mixed-source credential corpus · Global
Timeline: Breach (2014-02-08) · Indexed (Nov 09, 2017) · Year (2014)
Exposure: 11.0M records · 2 fields: Email Address, Password
Status: Misattributed
Executive Summary
A 2014 file containing ~11 million email addresses and plaintext passwords was labeled as a Coupon Mom breach and also appeared to include Armor Games data. Both organizations investigated and found the data did not match their customer bases, and some affected users reported never using either site. Have I Been Pwned flagged the breach as "unverified," and in July 2020 the file was additionally found to contain BeerAdvocate accounts. The dataset is best characterized as a misattributed, mixed-origin compilation rather than a confirmed breach of either named company.
ObscureIQ assessment: Creates password reuse and account takeover risk across platforms. Mixed attribution can also complicate user notification while still enabling attackers to test credentials at scale.
Breach Impact
Because the data could not be matched to Coupon Mom or Armor Games (or any single source) and is flagged unverified, its authenticity and origin are uncertain. If any records are genuine, exposed email/password pairs pose credential-stuffing risk, but attribution to either named company is not supported.
About Coupon Mom / Armor Games
This record concerns a 2014 file labeled as a Coupon Mom breach that also appeared to contain Armor Games data. Coupon Mom is a US coupon/savings platform; Armor Games is an online flash-game portal. Neither is confirmed as the true source of the data.
Why They Hold Your Data
Mixed-source breach compilations merge records from unrelated platforms into one dataset, often for resale or credential stuffing. These datasets typically contain login pairs and basic account identifiers drawn from separate breach events.
Recent Developments
On disclosure, both Coupon Mom and Armor Games found the data did not match their customer bases; some users reported passwords in the file despite never using either site. Have I Been Pwned flagged the breach as "unverified," and in July 2020 the file was found to also contain BeerAdvocate accounts, underscoring its mixed/misattributed origin.
Data Points Exposed
2 verified field types
Email Address
Password Critical
Field names are shown in full for clarity and search visibility. Canonical machine keys are emitted only in this page’s structured data.
Exploitation & Downstream Threats
Threat Activity:Moderate
Primary downstream threats:
- Credential stuffing against reused passwords (only if records are genuine)
- Targeted phishing using exposed emails (origin/authenticity uncertain)
Threat vectors:
- Credential stuffing & account takeover (unverified)
- Password reuse exploitation
Recommended Actions
If you believe your information may be included:
Change Reused Passwords
Update this account and anywhere you reused the password; use a manager.
Enable MFA Everywhere
Turn on multi-factor authentication on email first, then financial accounts.
Report & Recover
If you spot misuse, start an official recovery plan and report fraud.
Frequently Asked Questions
What happened in the Coupon Mom / Armor Games breach?▾
A 2014 file containing ~11 million email addresses and plaintext passwords was labeled as a Coupon Mom breach and also appeared to include Armor Games data. Both organizations investigated and found the data did not match their customer bases, and some affected users reported never using either…
What data was exposed?▾
Verified fields include Email Address, Password.
What should I do if I was affected?▾
Change reused passwords, enable MFA, and (if identity or financial data is involved) freeze your credit and monitor your accounts.
Sources & References
Every claim on this page is traceable. This breach draws on:
Breach Index
Breach Index
Cross-source
BreachNet.pw
Cross-source
LeakCheck.io
Cross-source
LeakCheck.net
ObscureIQ Intelligence
ObscureIQ proprietary analysis
Protect Yourself
Check If You're Affected
Enter your email to check whether your data appears in this breach. We’ll send a 6-digit code to confirm it’s your address.
Get Free Breach Alerts
Be the first to know when new breaches are disclosed. Free forever — confirm your email with a 6-digit code.
High-Risk? Get an Exposure Audit
Executives, public figures, and high-visibility operators can receive tailored exposure intelligence and hardening guidance.
Request Consultation