Editing Neopets (section)

=== Customer security ===
In July 2009, it was reported that the ''Neopets'' site was the target of an [[identity theft]] scheme that attempted to trick users into clicking a link that would install [[malware]] onto the user's computer. According to reports, the scheme was aimed not at child players' ''Neopets'' accounts, but at using the malware to steal the financial data and identities of their parents. Viacom stated that it was investigating the issue, and that the reports referred to a version of [[social engineering (security)|social engineering]] rather than an "indictment of Neopets security practices".<ref name="ID theft" /> In an on-site newsletter, ''Neopets'' claimed that the site's security measures prevented the posting of such links.<ref name="NT400" />

In 2016, [[Motherboard (Vice)|Motherboard]] reported that the account information of an alleged 70 million of Neopets accounts had been compromised.<ref name="Cox" /> The hack contained usernames, passwords, email addresses, birth dates, gender, and country from 2012 (prior to JumpStart's acquisition), but did not contain credit card information or physical addresses.<ref name="Cox" /><ref name="Shively" /> Neopets responded by sending emails to all affected players.<ref name="Shively" /><ref name="In order to be transparent" />

On 20 July 2022, Neopets confirmed that it had suffered a data breach the day prior. The data breach exposed Neopets' entire database schema, including usernames, emails and passwords of its 69 million users.<ref name="TheVergeBreach">{{Cite web |last=Faife |first=Corin |date=21 July 2022 |title=Hackers have breached the Neopets virtual pet community |url=https://www.theverge.com/2022/7/21/23272628/neopets-hack-data-breach-69-million-stolen-accounts |url-status=live |archive-url=https://web.archive.org/web/20220721154635/https://www.theverge.com/2022/7/21/23272628/neopets-hack-data-breach-69-million-stolen-accounts |archive-date=21 July 2022 |access-date=21 July 2022 |work=The Verge}}</ref> Neopets responded by forcing a password reset for all users on 1 August 2022, causing some players to be locked out as they no longer had access to the e-mail addresses linked to their accounts.<ref>{{Cite web |last=Carpenter |first=Nicole |date=2022-08-02 |title=Some Neopets users are locked out of their accounts following data breach |url=https://www.polygon.com/23289144/neopets-data-breach-password-reset-disaster |url-status=live |archive-url=https://web.archive.org/web/20220822210051/https://www.polygon.com/23289144/neopets-data-breach-password-reset-disaster |archive-date=22 August 2022 |access-date=2022-08-22 |website=Polygon |language=en-US}}</ref> On 29 August 2022 Neopets sent an e-mail to users detailing the results of their subsequent investigation.