To make matters worse, the notification happened only on the website itself and no emails were sent out to possibly affected users.
, a data breach happened on 8 November 2019 while the users were notified over a month later, on 19 December 2019. While that is not a surprise, the way Nexus Mods handled the breach is. Therefore, it was no wonder someone tried to acquire credentials of or at least a portion of almost 19 million users through an attack on the platform.
Nexus Mods is one of the most popular mod dissemination sites and to say the user base is large would be an understatement.
