Battle for the Galaxy: 6 Million Gamers Hit by Data Leak

A Chinese activity developer has unintentionally leaked practically six million participant profiles for the well-liked title Battle for the Galaxy after misconfiguring a cloud database, Infosecurity has acquired.

AMT Online games, which has manufactured a string of cellular and social titles with tens of millions of downloads in between them, uncovered 1.5TB of info by way of an Elasticsearch server.

✔ Approved Seller From Our Partners

Protect your privacy by Mullvad VPN. Mullvad VPN is one of the famous brands in the security and privacy world. With Mullvad VPN you will not even be asked for your email address. No log policy, no data from you will be saved. Get your license key now from the official distributor of Mullvad with discount: SerialCart® (Limited Offer).

➤ Get Mullvad VPN with 12% Discount

A investigation staff at opinions site WizCase found the trove, which contained 5.9 million participant profiles, two million transactions, and 587,000 suggestions messages.

Profiles generally aspect participant IDs, usernames, state, overall money invested on the sport, and Facebook, Apple or Google account info if the consumer connected these with their match account.

Comments messages consist of account IDs, opinions scores and users’ email addresses. At the similar time, transaction information involves cost, product bought, time of obtain, payment service provider, and occasionally customer IP addresses, in accordance to WizCase.

The organization warned uncovered buyers that their facts could have been picked up by opportunistic cyber-criminals looking for misconfigured databases. Details on how substantially dollars men and women have invested on the web page could empower fraudsters to goal the major spenders, it added.

WizCase warned that “it is popular for unethical hackers and criminals on the internet to use particular details to make trusted phishing emails. The far more info they possess, the much more plausible these email messages glimpse.”

It went on incorporate that confidential info such as email addresses and person issues with the company could permit negative actors to “pose as sport support and direct end users to destructive web-sites where their credit score card information can be stolen.”

The firm urged avid gamers to input the least amount of personal information feasible when purchasing or environment up an account and mothers and fathers not to lend young children their credit history cards.

WizCase said it arrived at out to AMT Online games with news of the data breach but did not get a reaction. The corporation afterwards disabled entry to the databases.