Provider mishap leads to data leak at Roblox

According to the American online gaming platform operator Roblox, a third-party provider that helps organize the annual developer conference has caused a data breach. Personal data such as names, email addresses and IP addresses have apparently been disclosed. Participants who have registered via the third-party provider's platform in the last two years are affected.

As Roblox explained on X on July 5, the cybercriminals had accessed parts of the user information from a registration list from the Roblox Developer Conference. The upcoming Roblox Developer Conference 2024 will take place from September 6 to 7 in San Jose, California.

Roblox as a popular target

The company has often made headlines due to data leaks or malware. In March 2024, heise online reported on malware that specifically targeted "Roblox" users. In December 2020, unauthorized persons accessed the personal information of almost 4,000 Roblox developers through a data leak.

"Roblox players are often also developers, as players can easily acquire in-game currency and other benefits through new modules. Virtual assets and in-game purchases are linked to the accounts. Cybercriminals exploit vulnerabilities in servers and platforms to steal this data and sell it on the darknet, for example.

Roblox Corp. is a game developer based in San Mateo, California, USA. David Baszucki and Erik Cassel founded the company in 2004 and published the game platform of the same name "Roblox" in 2006. In December 2023, the company employed over 2,400 people.

There are around 214 million users on the Roblox platform every month. The online players are predominantly younger players. Almost half are under the age of 13. The platform is particularly popular in the USA. Three quarters of all children between the ages of nine and twelve are said to have an account on the platform there.

(dahe)