Animal Jam | Data Breach Passwords

The Animal Jam data breach occurred in October 2020 after a hacker gained unauthorized access to a third-party vendor's server used for intra-company communication. This breach resulted in the theft of a database containing approximately 46 million account records. Password Security Status

Audit Other Accounts: If you used the same password for Animal Jam and other websites, change those passwords immediately. Animal Jam Data Breach Passwords

Change Your Password: Immediately update your password on Animal Jam. Ensure it is a long, complex string of characters. The Animal Jam data breach occurred in October

The Breach Details

The breach occurred in October 2020 but was not discovered until November of that year. A hacker exploited a vulnerability in one of WildWorks’ internal systems. While the game's main user database was not directly hacked, the attacker managed to access a Slack channel where company engineers had shared a database backup file. Forced password reset: All potentially affected users were

Stay safe, Jammers. The wild is dangerous—especially the dark web.

Vulnerabilities: While the majority remained secure, weak passwords consisting of common words or personal info (like your name or pet's name) were susceptible to decryption.

• Forced password reset: All potentially affected users were required to change their passwords upon next login.
• Legacy system shutdown: The company claimed the breached database was from a “legacy system” and that newer Animal Jam (Classic vs. Play Wild) used improved security.
• FAQ and emails: WildWorks published a security FAQ and sent breach notification emails to registered email addresses.
• Offered membership extensions: Some affected premium users received free membership days as compensation.

This backup file contained records for approximately 46 million users.