Million Webkinz by Gankin credentials leaked

An anonymous cybercriminal has leaked the usernames and passwords of nearly 23 million players to Webkinz World, an online children's game owned by the Canadian company Ganz.

A vulnerability in one of the web forms on the login page was exploited by the attacker to obtain the information, then the information was collected in a 1GB file and posted on a well-known Internet forum.

The company has issued a statement on Twitter clarifying that they are studying the incident, and they affirm that the platform has never asked its users for personal data such as postal addresses, telephone numbers or last names.