Love playing Draw Something or Words With Friends? Change your password now

A new report from Have I Been Pwned has revealed that a data breach at the online game company Zynga back in September affected 170m users.

To make matters worse, the Zynga hack ranks 10th among Have I Been Pwned's list of its all-time largest hacks of user information.

In September, Zynga admitted that it had suffered a breach that affected two of its most popular games and at that time, the company provided more information on its ongoing investigation into the incident in a player security announcement, saying:

“While the investigation is ongoing, we do not believe any financial information was accessed.  However, we have identified account login information for certain players of Draw Something and Words With Friends that may have been accessed.  As a precaution, we have taken steps to protect these users’ accounts from invalid logins.  We plan to further notify players as the investigation proceeds.”

Zynga data breach

According to Have I Been Pwned, the data breach Zynga suffered exposed 173m unique email addresses along with usernames and passwords stored as salted SHA-1 hashes.

While no financial information was stolen as a result of the incident, the passwords and usernames obtained by the attackers could be used to gain access to their other accounts online, especially if they reused the same passwords for multiple accounts.

CEO of the cybersecurity awareness and cloud data analytics platform CybSafe, Oz Alashe explained what Zynga users should do to protect themselves following the incident, saying:

“The disclosure of the full scale and nature of this breach, some three months after the initial announcement, is concerning. This delay, and the initial lack of information provided by Zynga to its users, has put victims at unnecessary risk. Especially now that the extent of the breach is clear, users who think they may have registered to use one of Zynga’s products, such as Farmville and Words With Friends, should navigate to to confirm whether they are impacted. Those who discover that their details have been compromised need to promptly act to change their passwords.”

Via The Verge

Source: TechRadar - All the latest technology news

By: Anthony Spadafora

Berlin venture studio Merantix raises $27M fund to concentrate on AI startups
Berlin venture studio Merantix raises $27M fund to ...
Samsung Galaxy S20 Ultra’s 108MP camera will likely take great 12MP photos
Samsung Galaxy S20 Ultras 108MP camera will lik ...
iPhone 12 release date, leaks and what we're expecting
iPhone 12 release date, leaks and what we're expec ...
The best cheap laptop deals and sales for Boxing Day: prices from just £139
The best cheap laptop deals and sales for Boxing D ...
Huawei's updated Mate Xs foldable will debut at MWC 2020
Huawei's updated Mate Xs foldable will debut at MW ...
Targus shows off it’s high-end docking solutions at CES
Targus shows off its high-end docking solutions ...