Security Affairs
JADEPUFFER: First End-to-End AI-Driven Ransomware Operation|The Anatomy of a Shadow AI Supply-Chain Breach: Lessons from the 2026 Vercel Incident|Law enforcememt operation disrupted Malicious Residential Proxy Networks NetNut|Government and Healthcare Are the Weakest Links in Global Email Security|Europe Confirms Record €4.1B Penalty Against Google for Android Practices|U.S. CISA adds a Microsoft SharePoint Server flaw to its Known Exploited Vulnerabilities catalog|430,000 FortiGate Devices Exposed in FortiBleed Ransomware Link|Adobe fixed multiple maximum-severity flaws in ColdFusion and Campaign Classic|Alleged Scattered Spider Hacker Extradited to U.S. to Face Cybercrime Charges|Oracle E-Business Suite Flaw Under Active Attack, 950 Systems Exposed|Azure CLI Targeted in LSHIY Password Spray Campaign Across 64 Orgs|CISA Warns BlueHammer Flaw Is Now Exploited in Ransomware Attacks|JADEPUFFER: First End-to-End AI-Driven Ransomware Operation|The Anatomy of a Shadow AI Supply-Chain Breach: Lessons from the 2026 Vercel Incident|Law enforcememt operation disrupted Malicious Residential Proxy Networks NetNut|Government and Healthcare Are the Weakest Links in Global Email Security|Europe Confirms Record €4.1B Penalty Against Google for Android Practices|U.S. CISA adds a Microsoft SharePoint Server flaw to its Known Exploited Vulnerabilities catalog|430,000 FortiGate Devices Exposed in FortiBleed Ransomware Link|Adobe fixed multiple maximum-severity flaws in ColdFusion and Campaign Classic|Alleged Scattered Spider Hacker Extradited to U.S. to Face Cybercrime Charges|Oracle E-Business Suite Flaw Under Active Attack, 950 Systems Exposed|Azure CLI Targeted in LSHIY Password Spray Campaign Across 64 Orgs|CISA Warns BlueHammer Flaw Is Now Exploited in Ransomware Attacks|
Advertisement

Ad Placeholder

Full Width × 90

Breaking News

Popular Webkinz World online children’s game hacked, 23M credentials leaked

ZDNet reported that a hacker has leaked 23 million credentials from the Webkinz World online children’s game. Webkinz are stuffed animals that have a playable online counterpart, www.webkinz.com, in “Webkinz World.” Webkinz were originally released by the Canadian toy company Ganz on April 29, 2005. Each Webkinz toy has an attached tag with a unique “Secret Code” printed on it […]

Webkinz World

ZDNet reported that a hacker has leaked 23 million credentials from the Webkinz World online children’s game.

Webkinz are stuffed animals that have a playable online counterpart, www.webkinz.com, in “Webkinz World.” Webkinz were originally released by the Canadian toy company Ganz on April 29, 2005. Each Webkinz toy has an attached tag with a unique “Secret Code” printed on it that allows you to play with your pet in the “Webkinz World” website. On Webkinz World, the Secret Code allows the user to own a virtual version of the pet for online play. 

A hacker has leaked the usernames and passwords of nearly 23 million players of Webkinz World on a well-known hacking forum. 

ZDNet has obtained the data dump with the help of experts from the data breach monitoring service Under the Breach who also noticed the data leak.

“ZDNet has learned that details about the vulnerability have been circulating online before today’s leak for months, both on hacking forums and on online IM chat groups.” reported ZDNet.

https://twitter.com/underthebreach/status/1251593598308618245

According to Under the Breach, the incident impacted 22,000,000 users, which is likely just a part of the full database stolen by attackers.

The database has a size of 1 GB, it contained 22,982,319 credentials, with the passwords being encrypted with the MD5-Crypt algorithm.

According to ZDNet, the incident took place earlier this month, threat actors exploited a SQL injection issue affecting one of the website’s web forms.

At the time of writing, the Webkinz staff had discovered the breach and addressed the flaw exploited by hackers.

ZDNet reported the incident to Ganz that has yet to reply.

[adrotate banner=”9″][adrotate banner=”12″]

Pierluigi Paganini

(SecurityAffairs – Webkinz World, hacking)

[adrotate banner=”5″]

[adrotate banner=”13″]