Incident

Roblox leaks data of 4,000 conference attending developers


Learn More

Roblox, recently experienced a significant data breach that resulted in the release of sensitive personal information belonging to approximately 4,000 individuals who attended the Roblox Developer Conference between 2017 and 2020.

The breach occurred in December 2020, but the information became available on public forums in July 2023.

The leaked data includes

  • names,
  • phone numbers,
  • email addresses,
  • dates of birth, p
  • hysical addresses,
  • t-shirt sizes of the affected individuals.

Such detailed and comprehensive personal information is highly valuable to cybercriminals and opens the door to identity theft and scams.

Roblox acknowledged the breach and stated that a subset of their creator community was affected. The impacted users were contacted and offered different levels of response based on the severity of their exposure. Some received a standard notification and apology, while others were provided with a year of identity protection services to mitigate potential harm.

The incident gained attention when the data was disclosed on public forums, and Roblox users have expressed concern over the delayed response and lack of prior disclosure when the breach originally occurred in 2020.

Security expert Troy Hunt, creator of haveibeenpwned, confirmed that the leaked data was posted in 2021 but had remained confined to niche Roblox communities until it surfaced on public platforms recently. This raised questions about the platform's awareness and handling of the incident, as there was no public disclosure or notification of the breach when it initially occurred.

Roblox leaks data of 4,000 conference attending developers