Latest Roblox Data Breach Impacts Thousands of Top Creators

A recent data breach has exposed select Roblox user information from a 2017–2020 Roblox Developer Conference invitation list.

Roblox was recently made aware that there was unauthorized access to select Roblox user information. This incident occurred back in 2021, and contained varying degrees of information on all invitees and attendees of the Roblox Developers Conferences from 2017–2020. Originally posted to a public hacking forum, the data breach leaked PII (personally identifiable information) including the Full Name, Address, Email, Phone Number, Date of Birth & IP of attendees.

Many users were not aware that their personal addresses and phone numbers were trivially accessible by bad actors, and as such, many high-profile developers were victims of targeted social engineering schemes making use of their personal details. On Wednesday, Roblox sent the following email to all developers who were impacted by this data breach:

Roblox was recently made aware that there was unauthorized access to select Roblox user emails from a 2017–2020 Roblox Developer Conference invitation list.

We want to let you know that your contact information below was included among the accessed data: Full Name, Address, Email, Phone number, Date of Birth & IP.

Out of an abundance of caution, we will provide you with a one-year subscription to an identity theft protection tool. In order to get started, please reply to this email.

Maintaining the security of your personal information is of utmost importance to us, and we have made efforts to ensure this type of incident is avoided in the future.

Roblox has not made a public statement or released any details regarding this data breach. If any more information becomes available, this Blog post will be updated.