Parents - Apples Animal Jam hacked, data stolen

[Kloudkicker 4,565]

The kids popular Apple app Animal Jam ("ranking in the top five games in the 9-11 age category in Apple’s App Store in the U.S") was reported, by the app maker WildWorks, they had a security breach in October and is trying to rectify the issue. I really, really hate when kids are targeted. 

~Security: Animal Jam warns of hack affecting 46 million accounts~ by Mark Wyciślik-Wilson posted November 16, 2020 :https://betanews.com/2020/11/16/animal-jam-hack-data-breach/

*Both articles read the same*

~Animal Jam was hacked, and data stolen; here’s what parents need to know~ by Zack Whittaker posted 9:00 am PST • November 16, 2020:  https://techcrunch.com/2020/11/16/animal-jam-data-breach/amp/

partially article quote from last article

"...while no data breach is ever good news, WildWorks has been more forthcoming about the incident than most companies would be, making it easier for parents to protect both their information and their kids’ data.

Here’s what we know.

WildWorks said in a detailed statement that a hacker stole 46 million Animal Jam records in early October but that it only learned of the breach in November.

The company said someone broke into one of its systems that the company uses for employees to communicate with each other, and accessed a secret key that allowed the hacker to break into the company’s user database. The bad news is that the stolen data is known to be circulating on at least one cybercrime forum, WildWorks said, meaning that malicious hackers may use (or be using) the stolen information.

The stolen data dates back to over the past 10 years, the company said, so former users may still be affected.

Much of the stolen data wasn’t highly sensitive, but the company warned that 32 million of those stolen records had the player’s username, 23.9 million records had the player’s gender, 14.8 million records contained the player’s birth year and 5.7 million records had the player’s full date of birth.

But, the company did say that the hacker also took 7 million parent email addresses used to manage their kids’ accounts. It also said that 12,653 parent accounts had a parent’s full name and billing address, and 16,131 parent accounts had a parent’s name but no billing address.

Besides the billing address, the company said no other billing data — such as financial information — was stolen.

WildWorks also said that the hacker stole players’ passwords, prompting the company to reset every player’s password. (If you can’t log in, that’s probably why. Check your email for a link to reset your password.) WildWorks didn’t say how it scrambled passwords, which leaves open the possibility that they could be unscrambled and potentially used to break into other accounts that have the same password as used on Animal Jam. That’s why it’s so important to use unique passwords for each site or service you use, and use a password manager to store your passwords safely.

Keep an eye out for scams related to the breach. Malicious hackers like to jump on recent news and events to try to trick victims into turning over more information or money in response to a breach..."

Stay safe