{"id":330897,"date":"2021-08-26T23:22:49","date_gmt":"2021-08-26T20:22:49","guid":{"rendered":"https:\/\/en.buradabiliyorum.com\/a-million-users-data-leaked-by-android-game-developer\/"},"modified":"2021-08-26T23:22:49","modified_gmt":"2021-08-26T20:22:49","slug":"a-million-users-data-leaked-by-android-game-developer","status":"publish","type":"post","link":"https:\/\/buradabiliyorum.com\/en\/a-million-users-data-leaked-by-android-game-developer\/","title":{"rendered":"#A Million Users\u2019 Data Leaked by Android Game Developer"},"content":{"rendered":"

“#A Million Users\u2019 Data Leaked by Android Game<\/a> Developer”<\/strong><\/p>\n

\n
\"Leaking
posteriori\/Shutterstock.com<\/a><\/span><\/figcaption><\/figure>\n

It seems like we can\u2019t get a break from the constant leaks lately. Now, a Chinese Android game developer called\u00a0EskyFun has potentially leaked the data of app<\/a>roximately one million users through an exposed server containing\u00a0134GB of data.<\/p>\n

In a report shared with ZDNet<\/a> by\u00a0vpnMentor\u2019s security researchers<\/a>, it was noted that the developer of games like Rainbow Story: Fantasy MMORPG, Metamorph M, and Dynasty Heroes: Legends of Samkok\u00a0had a server with all kinds of information on its users that wasn\u2019t properly locked down.<\/p>\n

The games in question have been downloaded more than\u00a01.6 million times, which is where the estimated one million user figure comes from. The data contained\u00a0365,630,387 records from\u00a0June 2021 onward.<\/p>\n

The most troubling part of the leak is the sort of information contained.\u00a0EskyFun has what the team at vpnMentor calls \u201caggressive and deeply troubling tracking, analytics, and permissions settings.\u201d That means the company was collecting far more data than seemed necessary for a mobile game.<\/p>\n

Some of the data collected include IMEI numbers, IP addresses,\u00a0device information, phone numbers, the OS in use, mobile device event logs, whether or not a handset was rooted, email addresses, purchase records for the game,\u00a0account passwords stored in plaintext, and support requests. It\u2019s a shocking amount of data that was apparently left out in the open.<\/p>\n

The team of researchers spoke about the issue and said, \u201cMuch of this data was incredibly sensitive, and there was no need for a video game company to be keeping such detailed files on its users. Furthermore, by not securing the data, EskyFun potentially exposed over one million people to fraud, hacking, and much worse.\u201d<\/p>\n

There were multiple attempts to reach\u00a0EskyFun about the hole by the researchers, and when they didn\u2019t receive a response, they ultimately had to reach out to\u00a0Hong Kong CERT to secure the server. As of July 28, the hole was closed, but the damage may have already been done.<\/p>\n<\/div>\n