Notice of Security Incident (February 2023)

Recently we became aware that an unauthorized third party had gained access to the computer of one of our employees and used information it found to send an email falsely claiming to be from The Sandbox. This notice is to make sure you understand what happened, what information was involved, and what we are doing to help protect you.

What Happened

On February 26, 2023, we became aware that an unauthorized third party had gained access to the computer of an employee of The Sandbox. This enabled the third party to access a number of email addresses to which it then sent an email falsely claiming to be from The Sandbox. This email, titled “The Sandbox Game (PURELAND) Access” included hyperlinks to malware that may have the ability to remotely install malware on a user’s computer granting it control over the machine and access to the user’s personal information.

The third party’s access was limited to a single employee’s computer, accessed through a malware application. To the best of our knowledge, the third party was unable to access any other services or accounts of The Sandbox.

What Information Was Involved

Email addresses of users of The Sandbox. If the recipient clicked on a hyperlink in the email and malware was installed on their computer, other personal information stored on the machine may be accessible.

What We are Doing

Promptly after discovering the unauthorized access, The Sandbox emailed the known recipients of the false email informing them it was unauthorized and instructing them not to open, play, or download anything from the hyperlinked website. We have blocked the employee’s accounts and access to The Sandbox, reformatted the employee’s laptop, and reset all related passwords including requiring two-factor authentication. We have not identified any further impacts. However, we are working with our team to monitor the situation and enhance our related security policies and practices.

What You Can Do

Our team is working diligently to ensure that the information users entrust to The Sandbox remains secure. We also strongly encourage our users to:

• Use strong passwords and implement two-factor authentication in order to keep your accounts as safe as possible.
• Do not click on any of the hyperlinks in the email indicated above or any other emails you suspect may be illegitimate.
• Install and run a trusted antivirus program to identify and remove any malware as soon as possible.
• Consult an IT professional and consider reformatting your computer if you suspect it has been infected with malware.

For More Information

If you have any questions, please feel free to contact us at cybersecurity@sandbox.game. To learn more you may also visit our official blog or find us on Twitter @TheSandboxGame.

Sincerely,

The Sandbox Team