Webkinz’s OG Creative Director Answers 25 Questions We All Had As Kids

shares
Heads up to parents out there: Webkinz, that cute stuffed animal game for kids, was hacked earlier this month, with almost 23 million user accounts compromised. So, you know… probably time to change those passwords. ZDNet reports that, earlier this week, a hacker leaked a 1 GB file, which contained the usernames and passwords of 22,982,319 accounts. According to anonymous sources, the actual breach occurred earlier this month. Ganz, the company behind Webkinz, said in a subsequent statement that it’d patched the vulnerability. It also said, in a news alert on its site (and I wish all news alerts were delivered with such an adorable dog avatar): “Your account security is of utmost importance to us, and we are investigating thoroughly. Please note that we have never asked for addresses, phone numbers or last names, and Webkinz accounts are not connected to eStore account data in any way.”
I’m old and childless, so I was mostly surprised to be reminded that Webkinz existed. But there are apparently lots of parents out there who need to be told that their offspring’s favorite game may have been compromised. Webkinz posted an alert on its blog saying it’s requiring everyone to change their passwords before logging into their accounts. Presumably this is to counteract the effects of the hack, and it’s the first thing I’d recommend to parents of Webkinz-addicted children. Also, if the comments on the security alert are anything to go by, several of the people who have Webkinz accounts also use the same password for other things. So I’d also recommend changing any password that’s the same as your Webkinz password — and into something different. Enable two-factor authentication if you can. Reusing passwords is dangerous, people. Get yourself a password manager if you can’t remember everything off the top of your head.

Millions of passwords for hit kid’s game Webkinz leaked online

Data Breach: Bad actor leaks 23 million account credentials from Webkinz children’s platform
Community   Chats   Webinars   Library
Data Breach: Bad actor leaks 23 million account credentials from Webkinz children’s platform
Over the weekend, ZDNet learned that nearly 23 million usernames and hashed passwords of the Webkinz World online children’s game platform were leaked on a popular hacking forum. Released by Canadian toy company Ganz in 2005, Webkinz World has consistently grown in popularity, allowing little ones to explore a virtual world with their plush toy after entering a special code online. According to Under the Breach, a bad actor posted 1GB file containing no less than 22,982,319 usernames along with the hashed passwords of players enjoying the Webkinz World variety of online kids’ games. In a Webkinz tweet on April 19, the platform does not appear to acknowledge the data breach or leak:  “We are aware of a story today alleging a data breach,” Webkinz wrote. “Your account security is of utmost importance to us, and we are investigating thoroughly. Please note that we have never asked for addresses, phone numbers or last names, and Webkinz accounts are not connected to eStore account data in any way. If you have any concerns, we encourage you to change your account password using the button on the Webkinz Login Screen.”
However, according to the initial publication, the platform’s staff had already detected the security incident and managed to fix the vulnerability in their system to prevent any further damage. Unfortunately, it is not clear if the leaked pairings of username and passwords are scraped only from the platform’s active pool of players. After 18 months of inactivity we will archive an account,” reads the notice on the gaming platform. “For security purposes, during the archiving process, we remove all information associated to the account other than then User Name and Password. Please note that if an account remains inactive for a period of 7 years, Ganz will then delete that account.”
The incident stands to prove that, no matter the industry or online platform, nobody is safe from cyber criminals. Hackers will attempt to penetrate any system and, as with any data breach or leak, users should be aware of the risks. Even if the passwords are hashed, they are not breach proof. A hacker can still attempt to crack a password through a brute force attack. If he succeeds, and you have used the same email address and password to log in on another platform, he can easily take over other existing accounts. It’s best to avoid using the same email address and password combination for multiple online accounts. But if you do, try to create a strong password (it can even be a phrase), and enable a multi-factor authentication method. Recent Articles By Author
Email*

Data Breach: Bad actor leaks 23 million account credentials from Webkinz children’s platform

It has been announced that the Canadian-based online game Webkinz has experienced a data breach, leaking over 23 million usernames and passwords from the children's platform. The game has significant reach worldwide. ZDNet has reported that a malicious hacker has leaked  the usernames and passwords of nearly 23 million players of Webkinz World . This is an online children's game managed by Canadian toy company Ganz. The data loss is significant given the reach of the game. The platform has been one of the most successful online children's games of the past decade, next to Disney's Club Penguin. Commenting on the incident for Digital Journal, Jumio CEO Robert Prigge says: "The 23 million exposed Webkinz usernames and passwords further validates that nobody’s personal data is safe. Whether it’s a child playing a game online, a hotel guest booking a room or someone ordering from DoorDash, hackers are looking for every entry point to gain access to user data." The analyst notes that the era of coronavirus is leading to more people going on line, including kids. Here he warns: "As children's education and activities have rapidly shifted online because of the current pandemic, it’s likely children are using the same usernames and passwords across multiple apps and online accounts, meaning this exposure allows hackers to gain access to more than just Webkinz." In terms of the general impact and lessons to be learned from the incident, Prigge notes: "It’s clear usernames and passwords can no longer be trusted to keep accounts safe, and today’s cyber-attack environment calls for a more sophisticated approach to online ID verification." As a more effective safeguard, Prigge recommends: "Biometric authentication (using a person’s unique biological characteristics to confirm identity) is one way to ensure only authorized users can gain access to an account, helping enterprises across industries keep their users’ data secure while keeping their business and customers protected from fraud."

Children's game Webkinz suffers from a data breach

Personal data of 23 million players of Webkinz children's game hacked
A hacker has compromised personal data of 23 million players of online children game Webkinz World by Canadian toy company Ganz, dumping the usernames and passwords on the Dark Web. IANS
April 20, 2020, 08:04 IST
San Francisco, A hacker has compromised personal data of 23 million players of online children game Webkinz World by Canadian toy company Ganz, dumping the usernames and passwords on the Dark Web. According to a ZDNet report on Sunday, an anonymous hacker posted part of the game's database on a well-known hacking forum. The security breach happened earlier this month. "The 1GB file uploaded online contained 22,982,319 pairs of usernames and passwords, with the passwords being encrypted with the MD5-Crypt algorithm," the report mentioned. The hacker allegedly gained access to the game's database using an SQL injection vulnerability present in one of the website's web forms. Launched in 2005, the Webkinz game is a very popular one only next to Disney's Club Penguin. The hacker allegedly gained access to the game's database using an SQL injection vulnerability present in one of the website's web forms. Webkinz has patched the hacker's point of entry into their systems. In a statement posted on its website, Ganz said it archives accounts that have been inactive for more than 18 months. "For security purposes, during the archiving process, we remove all information associated to the account other than then User Name and Password. Please note that if an account remains inactive for a period of 7 years, Ganz will then delete that account," the company said. "If you wish to reactivate an archived account and you remember your login credentials, simply attempt to login to your Webkinz World account to initiate the automatic account recovery process. You will be able to login to your account after 24 hours," it added. "Please note that if an account remains inactive for a period of 7 years, Ganz will then delete that account". Follow and connect with us on Twitter , Facebook
RELATED

Personal data of 23 million players of Webkinz children's game hacked

Gaming companies are defined as those developing technologies for the PC, console, mobile, and/or AR/VR video gaming market.

Gaming

Webkinz is a virtual world where children can care for virtual pets, earn virtual currency (KinzCash) and play kid-oriented games.

Wells Fargo Success Story

Professional Services

Platform Overview

WebKinz

Compete with WebKinz?

Compete with WebKinz?

Discover the right solution for your team