The Security of Information Collected by Zynga

In August 2020, a class-action lawsuit was filed against video game company Zynga Inc. for allegedly falsely promising it used “reasonable and appropriate security measures” to protect the personal identifying information – such as email addresses, passwords, and financial information – it collected from its players when, according to plaintiffs, the company did not adequately protect players’ data. Among other things, the complaint claims that the company used outdated and insecure data encryption methods that have been banned by the federal government and sometimes players’ passwords were not encrypted at all. (Rosiak et al v. Zynga Inc., Case No. 20-cv-5674, N.D. Cal.)

For more of TINA.org’s coverage of games, click here.