Roblox Hit by Major Data Breach

A substantial data leak has occurred on the Roblox platform, affecting approximately 4,000 developer accounts. According to reports from PC Gamer, the compromised information pertains to attendees of the Roblox Developer Conference between 2017 and 2020. The breach, which was initially discovered in December 2020 and later reposted on a forum in July 2023, was tracked by Have I Been Pwned, a website dedicated to monitoring data breaches. The leaked data includes email addresses, names, usernames, dates of birth, phone numbers, physical and IP addresses, as well as T-shirt sizes. Troy Hunt, the creator of Have I Been Pwned, received an email from a source stating that the initial breach was not publicly disclosed by Roblox, and those affected were allegedly not notified, as revealed by Hunt on Twitter. In response to the incident, Roblox issued a statement to PC Gamer, acknowledging awareness of third-party security issues involving unauthorized access to limited personal information. The company assured that affected individuals would receive an email outlining the subsequent steps to support them. Hunt shared the email sent by Roblox to the impacted users on Twitter, which included an offer of a year's worth of identity protection services. This incident follows a previous security breach in which a hacker illegally obtained internal Roblox documents as part of an extortion scheme.