Neopets

Disclosed Aug 29, 20224 years ago69,000,000 affectedConfirmed

Official notice

What is known

People affected	69,000,000 (as reported by the organization)
Disclosed	Aug 29, 2022
Discovered	Jul 20, 2022
Happened	Jan 3, 2021
Attack	Hacking
Data exposed	Names, Credentials and tokens
Sector	Other · US
Status	Confirmed

Sources

Source	Kind
California Attorney General breach notice: Neopetsoag.ca.gov · Official notice	Official notice
Washington Attorney General breach notice: Neopetsatg.wa.gov · Official notice	Official notice
Notice letter filed with the Delaware DOJ: Neopetsattorneygeneral.delaware.gov · Official notice	Official notice
Oregon DOJ breach notice: Neopetsjustice.oregon.gov · Official notice	Official notice

Notices filed

Where	Filed	People
Washington AGresidents of WA	Aug 29, 2022	788,415
Delaware DOJresidents of DE	Aug 29, 2022	109,758
California AGresidents of CA	Aug 30, 2022
Oregon DOJresidents of OR	Aug 30, 2022

Other breaches at Neopets

Breach	Disclosed	Attack	Sector	Status	Affected
Disclosed Jul 7, 2016Jul 7, 201610 years agoHackingUnverified	Jul 7, 201610 years ago	Hacking	Tech	Unverified	27Macct

History of this record

2026-09-25 · data_types: [] to ["names","credentials"] · backfill source
2026-09-25 · records_basis: empty to organization · backfill source
2026-09-25 · records: empty to 69000000 · backfill source
2026-09-25 · attack: unknown to hacking · backfill source
2026-09-25 · disclosed: 2022-08-30 to 2022-08-29 · backfill source
2026-09-25 · discovered: empty to 2022-07-20 · backfill source
2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Neopets

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.