In an email sent to customers, Roll20 announced that an administrative account had been compromised for approximately one hour on June 29, 2024. The access was blocked within one hour of the intrusion being discovered and an investigation began into the breach. From the email:
The email states that customers with questions or who would like a copy of the account data the third party mage have access to create a support ticket with the subject line "Incident Data Request" on http://help.roll20.net. A link was also provided to the United States Federal Trade Commission website on online security for consumers. A FAQ has also been posted to the Roll20 website.
