Security News > 2020 > March > Zynga Faces Lawsuit Over Massive Words with Friends Breach

Mobile game developer Zynga could face a class-action lawsuit stemming from a massive data breach last September, which impacted 218 million users of the Words with Friends mobile app.

According to a third-party analysis, that data included names, emails, user IDs, salted passwords, password reset tokens, Zynga account IDs, and connections to Facebook and other social media services.

The attack was against the mobile carrier's email vendor, it said, which led to "Unauthorized access to certain T-Mobile employee email accounts." Those accounts contained emails with account info for T-Mobile customers and employees, including customer names and addresses, phone numbers, account numbers, rate plans and features and billing information.

"This particular breach will have consequences reaching beyond T-Mobile or its customers' T-Mobile accounts," Geoff Huang, vice president of product at Sift, said via email.

Threat actors were able to access names, addresses, Social Security numbers, passport numbers or driver's license numbers, credit-card and financial account information, and health-related information.

News URL

https://threatpost.com/zynga-class-action-words-with-friends-breach/153477/