Around 4,000 Roblox Developer Profiles Were Made Public In 2020 Data Breach

Roblox developers who attended the game’s developer conference between 2017 and 2020 may be surprised to find out that some of their personal information has been floating around on the internet. The breach includes all the stuff ripe for identity theft: name, phone number, date of birth, physical address, etc. It also included each person’s t-shirt size – which is less useful, but still, probably information that not everyone wants out there.

The breach took place on December 18, 2020, but was apparently not made available until July of this year – according to haveibeenpwned. The site’s creator Troy Hunt shared the news more publicly on Twitter on July 17, when asking folks for more information.

Hi folks, anyone seen any commentary about this @Roblox incident? I have the data and have been contacted by multiple people about it, DM me if you have a link to any further discussion on it (or other info). pic.twitter.com/giBH1UBrXn

— Troy Hunt (@troyhunt) July 18, 2023

According to PCGamer, Robox is aware of the situation. A company spokesperson issued a statement to the publication via email stating that they have “engaged independent experts to support the investigation lead by [their] security team”. They also added that they’ll be sending emails to anyone who was affected to let them know what steps they will be taking. The unfortunate thing here is that this isn’t one of those “hey gang, go change your passwords” situations. Although… maybe, just to be safe, go change your passwords anyway.