Almost 4,000 Roblox users have had their personal information leaked after unauthorized parties gained access to profile data. This information includes full names, phone numbers, IP addresses, and even T-shirt sizes.
Users affected the most by the leak are being offered a one-year subscription to an identity theft protection tool, paid for by Roblox. However, one of the affected users claims that the company was aware of the breach back in 2021 when the data was first accessed, having been shared around the Roblox community at this time too. This raises serious concerns about the company's protection of its developers, many of which are fans creating games sometimes for very little in return.
Related: UKIE Needs To Go Further And Make It Harder For Children To Make Micro-Transactions
"In July 2023, a list of alleged attendees from the 2017-2020 Roblox Developers Conferences was circulated on a forum," reads a message from the data protection website, haveibeenpwned.com. "The data contained 4k unique email addresses along with names, usernames, dates of birth, phone numbers, physical and IP addresses and T-shirt sizes."
Troy Hunt, the creator of haveibeenpwned.com, has gone on to share emails he's received from those affected. He has also seen emails sent to users by Roblox itself, offering a year of protection to those who have had the most data released.
Roblox has since issued a statement to PC Gamer, although it says that the personal information obtained has been "limited".
"Roblox is aware of a third-party security issue where there were indications of unauthorized access to limited personal information of a subset of our creator community," reads the statement. "We engaged independent experts to support the
Read more on thegamer.com