Webkinz are stuffed animals that have a playable online counterpart,
A hacker has leaked the usernames and passwords of nearly 23 million players of Webkinz World on a well-known hacking forum.
ZDNet has obtained the data dump with the help of experts from the data breach monitoring service Under the Breach who also noticed the data leak.
“ZDNet has learned that details about the vulnerability have been circulating online before today’s leak for months, both on hacking forums and on online IM chat groups.” reported ZDNet.
According to Under the Breach, the incident impacted 22,000,000 users, which is likely just a part of the full database stolen by attackers.
The database has a size of 1 GB, it contained 22,982,319 credentials, with the passwords being encrypted with the MD5-Crypt algorithm.
According to ZDNet, the incident took place earlier this month, threat actors exploited a SQL injection issue affecting one of the website’s web forms.
At the time of writing, the Webkinz staff had discovered the breach and addressed the flaw exploited by hackers.
ZDNet reported the incident to Ganz that has yet to reply.
Necessary cookies are absolutely essential for the website to function properly. This category only includes cookies that ensures basic functionalities and security features of the website. These cookies do not store any personal information.
Any cookies that may not be particularly necessary for the website to function and is used specifically to collect user personal data via analytics, ads, other embedded contents are termed as non-necessary cookies. It is mandatory to procure user consent prior to running these cookies on your website.