Neopets, the popular virtual pet website from the early 2000s has become the victim of a massive data breach, seeing the website hacked and thousands of user accounts being sold online.
According to fansite JellyNeo, the hackers took more than user data- they’re also holding the Neopets.com source code hostage, with access being offered at 4 Bitcoin.
The official Neopets Twitter account has confirmed that they were indeed hacked, and have said that they were looking into it.
“Neopets recently became aware that customer data may have been stolen. We immediately launched an investigation assisted by a leading forensics firm. We are also engaging law enforcement and enhancing the protections for our systems and our user data“, the tweet reads.
Neopets recently became aware that customer data may have been stolen. We immediately launched an investigation assisted by a leading forensics firm. We are also engaging law enforcement and enhancing the protections for our systems and our user data. (1/3)
— Neopets (@Neopets) July 21, 2022
While their follow-up tweet recommends changing your password, reports from JellyNeo assert that the hack is a live breach, rather than a smash-and-grab: meaning that they can just keep re-downloading the database with your updated password.
Information compromised includes email address, passwords, gender, IP addresses, countries, and birthdays, and it’s highly recommended that rather than change your in-game password, you change any other accounts on external sites that might share them.
It’s not currently confirmed or denied if any payment information was also lost in the data breach.