Chinese mobile gaming firm EskyFun suffered a data breach where the data of over 1 million gamers were exposed on an unsecured server.
- vpnMentor’s researchers discovered that EskyFun suffered a data breach.
- The server contained 134 GB of data.
- EskyFun secured the server on July 28.
Chinese mobile gaming firm EskyFun suffered a data breach where the data of over 1 million gamers were exposed on an unsecured server.
EskyFun developed various Android games, including Rainbow Story: Fantasy MMORPG, The Legend of the Three Kingdoms, Adventure Story and Metamorph M. The games affected in the data leak were: Rainbow Story: Fantasy MMORPG (500,000+ downloads); Dynasty Heroes: Legends of Samkok (1,000,000+ downloads); Metamorph M (100,000+ downloads).
“EskyFun’s server was storing a rolling log of the previous seven days’ user records from 3 different games. At the end of each day, any data older than seven days was automatically deleted to make room for new data,” states that data breach disclosed by the researchers.
“As a result, our investigation focuses on just seven days’ worth of data and any players exposed in that short window. However, despite only covering seven days, the server still contained over 360 million records from players. This is a huge amount of data collected from a few small, not well-known mobile games.”
The experts noticed that the gaming firm uses “aggressive and deeply troubling tracking, analytics, and permissions settings,” gathering an impressive amount of data when users install their games. According to vpnMentor, the server contained 134 GB of data.
The exposed records comprise IP address, IMEI number, Mobile application package doing the tracking, Device screen size – whether a device is ‘rooted’, Device model, contact number (if any), Platform (Android/iOS), NetType (WiFi or cellular), Events (open, log in,level_up, etc.)
“If you’re a player on any of EskyFun’s games and are concerned about how this breach might impact you, contact the company directly to determine what steps it’s taking to protect your data.” added vpnMentor.
For the latest cyber threats and the latest hacking news please follow us on Facebook, Linkedin, and Twitter.
You may be interested in reading: How to Survive the COVID Time Cyber Security Threats?