According to analysis by cybersecurity firm Safety Detectives and the breach notification site Have I Been Pwned (HIBP) , the passwords in the Animal Jam database were hashed using the MD5 algorithm —and crucially, many were unsalted.
: While the majority remained secure, weak passwords consisting of common words or personal info (like your name or pet's name) were susceptible to decryption. Animal Jam Data Breach Passwords
Furthermore, because the data included parent emails, phishing campaigns skyrocketed. Parents received emails stating: "Your child’s Animal Jam account has been banned for fraud. Click here to verify payment details." Because the scammers knew the parent’s real email address and child’s username from the breach, these phishing attempts were highly convincing. because the data included parent emails