Breach Disclosure: RBX.rocks
|by Alpha Team
Breach Disclosure: RBX.Rocks
In August 2018, Roblox trading site RBX[.]rocks was breached, initially exposing 25,000 user records. In July 2019, an additional 125,000 records were revealed to have been exposed. This includes user email addresses, names, and passwords stored as bcrypt hashes.
Recommendations
- If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
- If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account
- Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks
- Remain alert to potential spear phishing attacks through email and social media.
Details
RBX[.]rocks, a ROBLOX trading website was inititally breached in August 2018. Further breached records were released in July 2019. ROBLOX is an online multiplayer gaming platform, where users can play a variety of different games. The breached site has since gone offline.
Tags: data breach, global, media/entertainment