Roblox Data Breach Exposes Personal Information of 4,000 Users
A Roblox Data Breach has apparently exposed the personal information of 4,000 users of the platform, including names, phone numbers, IP addresses, and even T-shirt sizes, but the game is refusing to say who these users are, or whether they are children.
Roblox is a platform that allows users to make their own games. It’s one of the most popular games among young children, and is often used in schools. The platform has admitted that some of its users, who are also makers of the games on Roblox, have had their personal information, including their real names and phone numbers, stolen and leaked online.
Roblox says it has offered a one-year subscription to an identity theft protection tool to the “most affected” users, but will not say who these users are, or whether they are children.
A user on Twitter, who claims to be a former employee of Roblox, alleges that the company was aware of the breach in 2021 when the data was first accessed, but did not disclose it until now. They also say that the leaked data includes information from the alleged 2017-2020 Roblox Developers Conferences.
Australian security researcher Troy Hunt, who runs the website haveibeenpwned.com, which allows you to check if your email address has ever been leaked online, says that he has received emails from affected users and seen Roblox’s emails offering protection.
The platform says that the personal information obtained was “limited,” and “formal steps have been taken to ensure that no additional information has been or will be obtained through this means.”
The wording in Roblox’s statements strongly suggests that the affected developers are ordinary users, not people making games on the platform. It is unclear if the third party has done anything else with the leaked data.
Some users have reported an increase in malicious calls, texts, and emails, although it’s not clear if this is related to the data breach.
The effectiveness of the protections offered by Roblox remains to be seen.
If your personal information was released in this data breach, or if you’re a parent whose child’s information was exposed, get in touch via email.
