Neopets security breach

[♥ Dita ♥]

@(you need an account to see links) How in the world did you find it so fast? That's crazy! Like I'm somewhat glad knowing it's only to one person but still! Who knows what that one person would do.

[Shawn]

I wonder if this breach also contains the CC info for premium… I sincerely hope not

IDK how it works, but I REALLY hope not. I hope this lies with their payment processor.

[Old but gold]

(you need an account to see links)


I just came to share a great comment lol

[Ghast]

I am disappointed to say the least. Data leaks happen all the time, of course, but in the particular case of Neopets, their staff has always been careless about protection and transparency.

I too wonder about payment methods, though considering it was not in the last leak I would hope it is not in this leak? Especially as it is not mentioned in the sale post shown in this thread... something else that comes to mind is that TNT has apparently been asking for IDs as proof that you are the owner of your account if you do not have access to your email anymore. While TNT's ticket system is through Zendesk, I would hope that the saved IDs are not stored or accessible.

[gayblayde]

@(you need an account to see links) How in the world did you find it so fast? That's crazy! Like I'm somewhat glad knowing it's only to one person but still! Who knows what that one person would do.

I googled. Took me like three minutes.

This is going to go to someone who wants to try and crack into peoples' bank accounts or steal their identities. It's not going to go to someone like me who would want to be petty and fuck up a few specific peoples' neopets accounts and dupe some items lol

[Hall]

Why would they tell you not to change your passwords? That's so bizzar? Maybe they are thinking that new activity will shine a spotlight on the account draw attention to it? IDK if those that have access to get a 'new copy' of the data at any time then like Joe said it's better to continually change your passwords. :/

[Ghast]

I am disappointed to say the least. Data leaks happen all the time, of course, but in the particular case of Neopets, their staff has always been careless about protection and transparency.

I too wonder about payment methods, though considering it was not in the last leak I would hope it is not in this leak? Especially as it is not mentioned in the sale post shown in this thread... something else that comes to mind is that TNT has apparently been asking for IDs as proof that you are the owner of your account if you do not have access to your email anymore. While TNT's ticket system is through Zendesk, I would hope that the saved IDs are not stored or accessible.

[Heck]

Am I missing something.. why hasn't TNT locked the doors yet? Like wtf.
Take the fucking site down and fix this shit???? We're literally sitting ducks if changing our information does nothing.

[gayblayde]

Am I missing something.. why hasn't TNT locked the doors yet? Like wtf.
Take the fucking site down and fix this shit???? We're literally sitting ducks if changing our information does nothing.

I literally do not think TNT CAN do that. The site is strung together with paperclips, hot glue, and chewing gum.

[Ice]

God I just. Have no words. It's just so fucking disappointing how little regard JS has for doing anything right by its customers. You would think that after neotruths' access has been brought up with staff several times kicking them out and shoring up their security would have been a bigger priority than ANYTHING. These people aren't after our UCs or virtual currency. They want your bank info, your PII, everything that we leave traces of ourselves across the internet... On one hand I feel like due to the large sample size in the grand scheme of things no matter what, there's such a small chance any of us would actually feel negative consequences from this, but I just feel sick how JS can let this bullshit happen again and again. This is why I invest in the black market and refuse to source things like NC from JS directly. Clearly the thousands upon thousands of dollars NCCers pour into the site mean nothing to the execs as long as their pockets are padded just a little while longer before pulling the plug for good. Despicable.