28 Million Gaming Accounts Exposed in MindJolt Data Breach
What Happened – In March 2019 the online gaming service MindJolt disclosed a breach that released 28,364,826 unique user records. The compromised data included email addresses, full names, and dates of birth; passwords were not part of the leak.
Why It Matters for Trust & Control Assurance
- The incident reveals a gap in documented user consent and data‑subject rights handling – a core control area that continuous privacy‑assurance programs monitor.
- Without auditable consent logs, organizations struggle to prove compliance with privacy regulations during an audit or investigation.
- Demonstrable, real‑time evidence of consent and DSAR processes reduces exposure risk and supports a defensible trust posture.
Who Is Affected – Online gaming platforms, consumer‑facing SaaS services, and any business that collects personal identifiers (email, name, DOB).
Recommended Actions
- Conduct a privacy impact assessment focused on consent capture and data‑subject rights.
- Deploy a consent‑management solution that records opt‑in status and can generate audit‑ready reports.
- Review and test DSAR (Data Subject Access Request) workflows to ensure timely, verifiable responses.
Source: Have I Been Pwned – MindJolt breach
Technical Notes – The breach was discovered via public reporting; no specific vulnerability or exploit was disclosed. Exposed data types: email addresses, names, dates of birth. No passwords or payment information were involved. Source: same as above