\n<\/p>\n
Sensitive information identifying thousands of Roblox<\/em> creators has been exposed following a data breach impacting attendees at a conference for Roblox<\/em> developers, which allegedly remained undisclosed by the company for at least two years. As reported by PC Gamer<\/em><\/a>, the leak contains personal information from people who attended the Roblox<\/em> Developer Conference between 2017-2020, including names, usernames, date of birth, physical addresses, email addresses, IP addresses, phone numbers, and even T-shirt sizes.\u00a0<\/p>\n<\/div>\n \u201cRoblox<\/em> is aware of a third-party security issue where there were indications of unauthorized access to limited personal information of a subset of our creator community,\u201d said a Roblox<\/em> spokesperson to PC Gamer<\/em>. \u201cWe engaged independent experts to support the investigation led by our information security team. Those who are impacted will receive an email communicating the next steps we are taking to support them. We will continue to be vigilant in monitoring and vetting the cyber security posture of Roblox<\/em> and our third-party vendors.\u201d<\/p>\n<\/div>\n Troy Hunt, creator of the website Have I Been Pwned, brought attention to the leak on July 18th<\/a> after \u201cmultiple people\u201d notified him that the private data had been published online. According to one of Hunt\u2019s sources<\/a>, the initial data breach dates back to 2021, but didn\u2019t spread beyond \u201cniche cheating communities within Roblox.<\/em>\u201d The source also claims that an undisclosed number of \u201chigh-profile users\u201d impacted by the leak have started receiving malicious calls, texts, and emails. As noted by PC Game<\/em>r, the identifying data leaked opens up individuals to all sorts of scams and harassment, including identity theft.<\/p>\n<\/div>\n Have I Been Pwned reports<\/a> that the original breach may have occurred even earlier on December 18th, 2020, and that 3,943 Roblox<\/em> accounts have been compromised. Roblox<\/em> did not publicly disclose the breach until this week. \u201cRoblox<\/em> has now contacted everyone affected,\u201d said the company in a statement sent to Hunt. \u201cMinimally affected users just got a sorry email. For more seriously affected users they got a year of identity protection and an apology for everyone else.\u201d\u00a0<\/p>\n<\/div>\n We have reached out to Roblox<\/em> to clarify when the initial breach occurred, and if the company had previously notified individual account holders impacted by the leak. We will update this story should we hear back.<\/p>\n<\/div>\n Given the sensitive nature of the leaked data, the impact of this could be especially nefarious when you consider that children as young as 13<\/a> are permitted to join Roblox<\/em>\u2019s Developer program. The gaming platform isn\u2019t designed<\/a> specifically for children, but it is <\/em>extremely popular<\/a> with minors. According to the company\u2019s Q1 earnings report<\/a> for 2023, 43 percent of the platform\u2019s 66.1 million daily active users are under 13.<\/p>\n<\/div>\n