Animal Jam

In October 2020 the popular childrens online game Animal Jam suffered a massive data breach after a server was compromised. The incident resulted in the exposure of approximately 46 million user accounts. The stolen database contained sensitive information including millions of unique parent email addresses and encrypted passwords using the PBKDF2 algorithm. Beyond credentials the data included personal details such as full names of parents and billing addresses. The breach originated from a third party provider server that was improperly secured allowing unauthorized access to the database backups.