If you or your child had an Animal Jam account around or before 2020, you must take proactive steps to secure your digital footprint:

The numbers are staggering. While the official breach notification to regulators (sent to the Wyoming Attorney General) claimed approximately accounts were affected, security analysts and Have I Been Pwned (HIBP) founder Troy Hunt analyzed the data and suggested the number of unique email addresses was closer to 32 million .

In the wake of the breach, the Animal Jam black market exploded. Because hackers had plain text passwords, they performed —logging into accounts, trading all rare items (like "Solid Black Long Collars" or "Rare Headdresses") to a central "mule" account, and selling the virtual goods for real money on eBay or Discord.

The breach occurred in October 2020 but was not discovered until November of that year. A hacker exploited a vulnerability in one of WildWorks’ internal systems. While the game's main user database was not directly hacked, the attacker managed to access a Slack channel where company engineers had shared a database backup file.

Information such as birth years, genders, and billing addresses linked to paid memberships. 🔒 Essential Security Remediation Steps

In November 2020, WildWorks, the parent company of Animal Jam, confirmed that a hacker had stolen a massive database containing information from roughly 46 million accounts. The breach occurred after a cybercriminal gained unauthorized access to a third-party vendor’s communications server. This server contained back-ups of historical user data, which the attacker successfully extracted and published on an online hacking forum. 🔑 The Status of Compromised Passwords

Here’s a concise incident report:

WildWorks also stated that the passwords were —meaning a random value (salt) was added before hashing—which does add a layer of protection. However, the combination of SHA‑1 and salts still leaves weaker passwords vulnerable to offline cracking.

As of late 2025 and early 2026, there are at Animal Jam. However, the 2020 incident continues to serve as a reminder for families to maintain good security hygiene. Users occasionally report lingering concerns about account safety on community forums, but the official systems remain secure.