A hacker bribed a Roblox worker to gain access to the back-end customer support panel.
Roblox is available across PC, Xbox, and mobile devices. Users can create their own games with their platform's engine or play others' creations. Roblox also leans heavily into microtransactions, with users able to buy game passes to access more powers and abilities, or they can purchase cosmetic items for their character with in-game currency.
Roblox game developers can also cash out and earn real money from their creations.
The hacker got the ability to look up personal information on over 100 million active monthly users and grant virtual in-game currency.
The hacker accessed users' email addresses, as well as change passwords, remove two-factor authentication from their accounts, ban users, and more.
The screenshots shared with Motherboard include the personal information of some of the most high-profile users on the platform.
"id": "ROB1952291222",
"linkid": "roblox",
"type": "Breach",
"date": "05/2020",
"severity": "100",
"impact": "",
"explanation": "Attack threatening the organization's existence"
Join the conversation