The Animal Jam data breach was discovered in July 2020, when a security researcher reported a vulnerability in the game's login system. Upon investigation, it was revealed that an unauthorized party had gained access to the game's database, compromising sensitive user information, including:
: Full names and billing addresses for a subset of accounts. Was your password leaked? Animal Jam Data Breach Passwords
WildWorks has since upgraded its password storage to use (a strong, computationally expensive hashing algorithm) and has implemented mandatory 2FA for certain high-value accounts. The company undergoes regular third-party security audits. For new players creating accounts today, the risk is significantly lower than it was in 2020. The Animal Jam data breach was discovered in
To keep your Animal Jam account secure today, the developers recommend: WildWorks has since upgraded its password storage to
: Security researchers found some lists circulating on hacker forums that included "de-hashed" passwords in plain text, which could be used for credential stuffing attacks. Immediate Actions Taken WildWorks (the creator of Animal Jam) responded by: Animal Jam data breach - Hackers - The Cyber Post
The plaintiffs alleged:
The Animal Jam Data Breach: Everything You Need to Know About the 2020 Incident