Sensitive user data from 4000 developer accounts has been affected by a data protection breach within the ROBLOX servers.
According to reports, a data leak within the ROBLOX servers led to a glaring data breach. It was currently possible to read out up to 4000 user accounts, which maintained completely identifiable content. In addition to stored bank details, this includes, for example, the telephone number or the full address and the date of birth.
A spokesman for Roblox Corporation stated, “ROBLOX is aware of a third-party security issue where there has been evidence of unauthorized access to limited personal information of a subset of our creator community.”
The disclosed accounts are the participants of the ROBLOX Developers Conferences, from 2017 to 2020, who presented their work there. The event is organized by developers for the community to inform about the latest things within the ROBLOX world.
It continues: “We have engaged independent experts to assist in the investigation, led by our information security team. Those affected will receive an email informing them of the next steps we are taking to support them. We will continue to be vigilant when it comes to monitoring and reviewing the cybersecurity of Roblox and our third-party providers.”
The theft of the records is a glaring problem for the robbed, since such a large database is a dream come true for scammers. Identity theft using this data has already led to victims of targeted social engineering attacks. It is not entirely certain when the security team first discovered the data leak or how quickly they acted to counteract it.