Data breach exposes personal information of 4,000 Roblox developers

theverge.com:

By Jess Weatherbed, a news writer focused on creative industries, computing, and internet culture. Jess started her career at TechRadar, covering news and hardware reviews.

Sensitive information identifying thousands of Roblox creators has been exposed following a data breach impacting attendees at a conference for Roblox developers, which allegedly remained undisclosed by the company for at least two years. As reported by PC Gamer, the leak contains personal information from people who attended the Roblox Developer Conference between 2017-2020, including names, usernames, date of birth, physical addresses, email addresses, IP addresses, phone numbers, and even T-shirt sizes. 

“Roblox is aware of a third-party security issue where there were indications of unauthorized access to limited personal information of a subset of our creator community,” said a Roblox spokesperson to PC Gamer. “We engaged independent experts to support the investigation led by our information security team. Those who are impacted will receive an email communicating the next steps we are taking to support them. We will continue to be vigilant in monitoring and vetting the cyber security posture of Roblox and our third-party vendors.”

Troy Hunt, creator of the website Have I Been Pwned, brought attention to the leak on July 18th after “multiple people” notified him that the private data had been published online. According to one of Hunt’s sources, the initial data breach dates back to 2021, but didn’t spread beyond “niche cheating communities within Roblox.” The source also claims that an undisclosed number of “high-profile users” impacted by the leak have started receiving malicious calls, texts, and emails. As noted by PC Gamer, the identifying