DIRECT GAMES store hit by breach, member data leaked
Parent company H2 INTERACTIVE says email addresses, encrypted passwords and order histories were exposed between October 17 and 18, 2026.
H2 INTERACTIVE announced that unauthorized access by a third party to its Japanese subsidiary H2INT, which operates the PC game key store DIRECT GAMES, led to a leak of member information. The unauthorized access took place between October 17 and October 18, 2026, and the leak was discovered on October 18, 2026.
According to GamesPark, the exposed data includes member IDs in the form of email addresses, encrypted login passwords, dates of birth, names and order histories. H2 INTERACTIVE said credit card numbers are not stored by the company and were not part of the leak.
The company has blocked communications from the source of the unauthorized access and has asked all members to reset their passwords. It also reported the incident to the Personal Information Protection Commission and is investigating with external specialist organizations.
Earlier security maintenance
DIRECT GAMES had recently carried out maintenance to strengthen security and told registered users that password resets were required.
Quick answers
What data was leaked in the DIRECT GAMES breach?
Member IDs (email addresses), encrypted login passwords, dates of birth, names and order histories. Credit card numbers were not leaked.
When did the DIRECT GAMES unauthorized access happen?
Between October 17 and October 18, 2026. The leak was discovered on October 18, 2026.
What should DIRECT GAMES members do?
H2 INTERACTIVE has asked all members to reset their passwords.