Animal Jam warns of hack affecting 46 million accounts

The popular Animal Jam game, enjoyed by millions of children around the world, advised parents to crack it by revealing the personal details of 46 million accounts.

Animal Jam, WildWorks, issued a warning that the attack identified 7 million email addresses for account creation and 32 million player names. Some of the 46 million invoices involved have a full name and address for invoicing.

In an article on the Animal Jam website, Wildworks reports that it has been informed that a database with user data of Animal Jam has been stolen during a recent attack on the manufacturer’s server that WildWorks uses for its internal communications. A subset of the stolen records contains the e-mail addresses of the parents who manage the player accounts, and other data that can be used to identify the parents of Animal Jam players.

The company points out that the names of children have not been disclosed and that the number of users for whom names and billing addresses have been leaked is very small (only 0.02%). This is probably no great consolation for the thousands of people whose invoice details have been disclosed.

The complete list of open data is as follows:

  • The email addresses used to create about 7 million Animal Jam and Animal Jam Classic parent accounts.
  • There are about 32 million player names associated with these master accounts.
  • Passwords associated with these user accounts, but in encrypted form.
  • 14.8 million entries include the player’s year of birth, which was entered when the account was created.
  • 23.9 million records contain the gender of the player entered when creating the account.
  • 5.7 million accounts contain the Player’s full date of birth, as provided for when the account was registered.
  • 12,653 Parental invoices contain the full name and billing address of the parent (but no other billing details).
  • 16.131 of the parent accounts contain the first and last name of the parent, without billing address.

WildWorks also says

We expect our provider’s server to be available from 10 to 12 hours. October 2020 has been compromised. At that time it was not clear that the hacker had access to the account name database, and all systems involved were modified and protected against further intrusion. The theft of the database probably took place in the same period, from the 10th to the 12th century. October 2020.

The company says it cooperates with the FBI and international law enforcement agencies to determine what will happen. He also offers the following advice to interested customers:

  1. Find all email addresses you have used in recent years at https://haveibeenpwned.com to see if they were in the compromised database.
  2. If your WAS email address has been activated illegally, you should take the precaution to change the password of your email account immediately, especially if it is a password you use for other Internet accounts.
  3. Never give your password to anyone at Animal Jam for any reason. Even your best friend. Never enter your username or password on sites that promise sapphires or free packages. These pages will only be used to steal your login details.
  4. If you believe your Animal Jam account has been accessed illegally, please contact the security department via email at [email secure] or click here. They will make inquiries and ensure the security of your account.

Related Tags:

animal jam database,raidforums animal jam,how to change animal jam password,shinyhunters,animal jam instagram,how to delete animal jam account