Neopets, a play-to-earn game metaverse, releases details of the recent data breach on its platform. According to the game metaverse, the team received a notification on July 20, 2022, on some activities showing unauthorized access to its IT systems by a third party.
Neopets mentioned that it immediately took steps to close down the system to prevent further access. The notice further revealed that the platform launched an immediate investigation in partnership with a leading forensics firm and law enforcement.
Following the investigation, the team discovered that there was indeed unauthorized access and possible download of personal information of some players.
Details of Possible Data Compromise
The investigation performed by the teams revealed that some information about past and present Neopets users may have been compromised. Some of these data may include information provided during registration or while playing the game.
They cover name, username, email address, gender, and date of birth. They may also include hashed password, Neopets PIN, IP address, and data on players’ pets. Data of players that signed up and played on the platform before 2015 may also have been accessed and downloaded, including inactive non-hashed passwords.
Neopets stated that the download may have been done between January 3 to February 5, 2021, or July 16 to 19, 2022.
Details of what Neopets Metaverse is doing
According to the game platform, it is committed to protecting the personal data of its players and as part of its continuous commitment to safeguarding the privacy of players, Neopets has reset the passwords of players and is currently working toward including multi-factor authentication for more robust account protection.
Additionally, the game platform has enhanced the safety of its systems by strengthening its network monitoring, system protection, and authentication.
What Can Players Do?
Neopets recommends that users of its game platform should reset their passwords. Additionally, they should change their passwords on other websites, especially if using Neopets’ passwords on such sites. The game platform also recommends that players remain vigilant against threats of identity fraud or theft.
It went further to encourage users to regularly monitor and review their credit history and account statements for any unauthorized activity or transaction. Players that suspect they are a victim of identity fraud or theft should contact their local police immediately.
