The popular BeamNG.drive multiplayer mod BeamMP has been hit by a major security breach, with its Discord server compromised and core services temporarily taken offline. BeamNG.Drive is quite popular in the sim space, and BeamMP is one of the most downloaded mods for it.
Reports of the incident began surfacing on March 28, 2026, when users noticed unusual activity across BeamMP’s platforms. Shortly after, the project’s Discord server was effectively “wiped,” which was the main communication hub for fans. At the same time, BeamMP’s website and backend services were taken offline.
According to statements shared by the BeamMP team, the attack appears to have originated from a compromised bot token with administrative access, which allowed the attacker to take control of the Discord server.
But that’s not the worrying part. After further investigation, it was revealed that the breach extended beyond the Discord Server. BeamMP’s core infrastructure was also accessed, which resulted in a massive data breach involving user information stored on their systems.
What Was Compromised During The Breach

The original news caused massive panic among the fans. And, rightly so, as a leak of private information never goes well. However, the BeamMP team quickly provided a bit more clarity about the situation. They have outlined what the breach affected and what it did not.
According to official updates, the compromised data may include usernames, email addresses, IP addresses, and encrypted password hashes. These password hashes are “salted,” meaning they are encrypted and not stored in plain text. However, it would still be a good idea to change passwords if you haven’t already.
Crucially, developers stated that there is no evidence that the BeamMP launcher or client files were manipulated or infected during the attack. The initial breach made fans worry that the launcher or the mod itself was compromised, and it would introduce malware into those systems. But, BeamMP has clarified that that’s not the case.
The outage of BeamMP’s website and services appears to have been a deliberate shutdown by the team to prevent further damage while the breach is investigated and systems are secured.
For now, players should remain cautious, follow official updates, and take basic security steps. But there is no confirmed evidence of widespread system compromise beyond the data breach itself.
Published: Mar 30, 2026 03:41 pm