Millions of Accounts Hacked in Game Data Breach
Fashion Fantasy Game, an online game and social network for fashion enthusiasts, has been hacked, and according to a database that records breached information, over 2.4 million accounts were stolen.
The game, which allows players to design and sell items in a virtual online business, only has 15,000 current users following the game on Facebook. However, the information of all users—past and present—has been exposed. Troy Hunt of Have I Been Pwned said the records contained user email addresses. While the addresses were secured with a MD5 hash algorithm, this is relatively easy to crack.
Even though the leak occurred over a year ago, it is just now coming to light. Even more disturbing, researchers suggested on Twitter that the website vulnerabilities which led to the breach still exist, and the company has not yet acknowledged a breach or compromise.
Fashion Fantasy Game has faced security issues before. Three years ago, Reddit contributors discovered a file dump that included usernames, first names, email addresses and passwords that could be easily guessed.