"Old Roblox Data Leak Resurfaces, 4000 Users' Personal Information Exposed"

A data breach affecting the online game platform Roblox has recently exposed sensitive information from thousands of users.  Troy Hunt, founder of the website "Have I Been Pwned," first alerted on Twitter on July 18, 2023, about a potential leak impacting attendees of the 2017-2020 Roblox Developers Conferences.  The leaked list was shared in CSV format and contained 4000 unique email addresses, alongside personal details such as names, usernames, dates of birth, phone numbers, and physical and IP addresses.  One source told Hunt that the leak was initially posted in 2021 but "didn't spread beyond niche cheating  communities within Roblox" and that "Roblox never publicly disclosed this leak or alerted those affected." Hunt noted that recently the data was re-published on a public hacking forum, where it gained much more attention.  High-profile users have started receiving malicious calls, texts, and emails due to the leak.  When Hunt reached out to Roblox Corporation, they confirmed the leak on July 20 and said that it sent an email to all Roblox developers.  Roblox noted that seriously affected users got a year of identity protection.

 

Infosecurity reports: "Old Roblox Data Leak Resurfaces, 4000 Users' Personal Information Exposed"

Submitted by Anonymous on