Bin Weevils Online Game

Posted on
Bin Weevils Online Game Average ratng: 3,7/5 3747 votes

We’ve seen it before – in fact, we seem to be seeing it a lot recently – data from an old hack first being publicly leaked. This time it’s Bin Weevils, a British online children’s game, owned by 55 Pixels.

In September 2014, Bin Weevils posted a note on their site that they had discovered a “vulnerability” affecting usernames and passwords. In response, they forced a password reset and added some unspecified security features. Their note does not seem to inform users that the data were actually hacked and acquired. And based on data provided to DataBreaches.net yesterday and today, they did not fully disclose the types of information that were hacked.

  1. Dec 22, 2007 Race against your friends in the free online 3D virtual world www.binweevils.com.
  2. Posted; Garden of the Week Winner - gladdaisy4! A weekly showcase of the best gardeners in the Binscape!

Mar 21, 2019 Bin Weevils is a 3D virtual game created for kids to explore. The game takes place within a dustbin that is full of NPCs and other players who control their own weevil. Bin Weevils has slowly grown from a popular cartoon series in 2003 to one of the most popular virtual worlds (launching in 2007).

Yesterday, DataBreaches.net was contacted by “ShohidzIslam,” who wrote that he had learned of a database that was now being released to the public by hackers going by the names of “Pure”, “LukeBaxter”, “Akshay”, “Tyrone” and “Philip.” A link to the data had reportedly been posted in an IRC chat.

The file, which DataBreaches.net obtained and inspected, consisted of 1,022,883 records. Each record included the user’s username, encrypted password (salt+hash), and in-game data like their pet’s ID number, pet’s name, and date of registration. A line at the top of the dump credits “jkb, legit, lukebaxter, tyrone, philip, pure, akshay.”

ShohidzIslam informed DataBreaches.net that he asked the hackers if they also had IP addresses and email addresses. In response, they provided a redacted screenshot showing all of the fields, which did include both registration and login IP addresses, as well as email addresses.

“Luke Baxter” allegedly informed him that they were reserving the full data set with the email addresses and IP addresses as they might sell all of the data privately at some future time. The 1-million record sample was to alert the public that the data were out there, but he claimed that the full data set has approximately 20 million records.

Game

Data in the dump were dated from 2014, which would be consistent with the incident reported in September, 2014 by Bin Weevils. Attempts to verify the data by trying to create new accounts using usernames in the dump resulted in messages that the tested usernames were already taken. Data in the redacted screenshot corresponded to data found in the data sample, although it appeared to be from a different database as the order of the rows did not match.

Evidence that the hackers have email addresses obviously raises questions about Bin Weevils’ report that the breach affected (only) usernames and passwords. Based on Bin Weevil’s About page and Privacy Policy, the email addresses are likely the parents’ email addresses. Parents might understandably want to have been informed if their email addresses with some of their children’s information had been acquired by hackers.

DataBreaches.net sent Bin Weevils an inquiry yesterday asking them to confirm whether email addresses and IP addresses were also in the hacked database, and to confirm or deny the claim of approximately 20 million records, but has received no reply other than an auto-responder.

DataBreaches.net will update this post if additional information is obtained.

Update of August 20, 2017: DataBreaches.net received an email from a sender identifying themselves as “Akshay,” that claimed, in part:

Bin Weevils Online Generator

… The information on that link I have given has the name ‘akshay’ in, who did not have anything to do with the games database being released, the name was used to blame another individual.

I have copy and pasted the lines on your website containing the name ‘akshay’ below. You was given this article by someone who was actually involved in what happened and now is trying to cover himself up and blaming others which is really sad.

6 Questions By Mcvandel Last updated: Aug 3, 2017 Total Attempts: 120

Bin Weevils is a British children’s online MMO game, based around the theme of the real life Weevil insects. It allows its young user base to choose characters, interact and have fun in an online environment.

Bin Weevils Online Game Download

  • Are you a diva

    • Yes

    • No

    • Mmmmm now you mention it

    • I have no time for that gotta level up

    • Huh?

  • Do you have a bin pet if so what is its main colour
  • Are you a bin tycoon

    • Yes i am the best one too

    • No i want to be though

    • WAT!!??

    • I am when i can be

    • Always hhave been always will be

  • How many questions do you think there should be in this quiz

    • Wat is all this stuff u r talkin bout

    • Yes?

    • None i hate it rated 0 for zzzeeerrrooo

    • 5 its a regular number

    • Cant talk getting mulch

  • Which weevil do YOU THINK you are

    • Tink

    • Clott

    • Scribbles

    • Mcvandel

    • Nest_Inspector

  • What is your fav colour out of these five

    • Rainbow

    • Blue

    • Green

    • Grey

    • Colour, what colour?