E3 website leaks personal info, including addresses and phone numbers, of 2,000+ reporters and content creators; E3 has removed file but data still circulates
A spreadsheet containing the contact information and personal addresses of over 2,000 games journalists, editors …
Context & Ripple Effects
E3 published a press-registration spreadsheet that included home addresses and phone numbers for more than 2,000 reporters and content creators; the file has been pulled, but copies are already circulating. That puts the show organizer on a list of gaming-industry data failures that includes the ESEA hack exposing 1.5M user records and the leak of sensitive info on nearly 4,000 Roblox Developer Conference attendees.
What makes this one distinct is the source: not an external breach but the event's own website serving data that should never have been in a publicly reachable file. For an organization whose core asset is its relationship with the press corps, the permission boundary around 'media contact' data just failed in the most visible way possible.
First-order effects
- Over 2,000 named journalists and creators now have home addresses and phone numbers exposed to anyone holding the circulating copy, with harassment and doxxing risk falling hardest on those who cover controversial studios or communities.
- E3 must notify and support affected registrants while absorbing direct reputational damage with exactly the audience — the press — whose attendance and coverage the show depends on.
Second-order effects
- Other game-industry event organizers face pressure to audit whether their own registration and badge systems expose similar attendee data, since the Roblox DevCon and ESEA precedents show this is a repeat failure mode rather than a one-off.
- Journalists and creators can be expected to change how they register for events — burner emails, business addresses, withheld phone numbers — degrading the quality of the very contact data organizers rely on for credentialing.
Third-order effects
- If attendee-database leaks keep recurring across E3, Roblox, and esports platforms, event operators will be pushed toward collecting less personal data by default and separating what is operationally needed from what sits in downloadable files.
- A track record of mishandled journalist and creator data strengthens the case for regulators treating event-registration datasets like any other consumer-data liability rather than an industry back-office afterthought.
The trend: Gaming-industry event and community platforms are becoming a recurring leak vector for personal data, forcing a rethink of how much information conferences collect from attendees and press.