Security News > 2020 > March > Zynga faces class action suit over massive Words With Friends hack

Zynga faces class action suit over massive Words With Friends hack
2020-03-05 11:03

Zynga - maker of addictive online social games such as FarmVille, Mafia Wars, Café World and Zynga Poker - is facing a potential class action lawsuit over the September 2019 breach in which hackers got access to more than 218 million Words with Friends accounts.

Zynga admitted to the breach at the time, saying that hackers got their hands on "Certain player account information" but that, at least during the early stages of its investigation, it didn't think any financial information was accessed.

Hacker News, which scrutinized a sample sent over by GnosticPlayers, said that the breached data included names, emails, Login IDs, hashed passwords - "SHA1 with salt", password reset tokens, Zynga account IDs, and connections to Facebook and other social media services.

The plaintiffs' lawyers say that Zynga allegedly failed "To reasonably safeguard" player information, referring to Zynga's "Substandard password security."

The suit was brought on behalf of two affected users, one of whom is a parent of an affected user who's underage, and one of whom had a Zynga account herself.


News URL

https://nakedsecurity.sophos.com/2020/03/05/zynga-faces-class-action-suit-over-massive-words-with-friends-hack/