Genshin Impact scandal exposed player information?

On Reddit, multiplayer Genshin Impact said they reported this security bug to the website of MiHoYo – The father of this role-playing game. Specifically, when players forget their account password, they will click on the familiar link “Forgot password?” and a web page will appear to send a new password reset code through the phone number associated with the previous account. However, the phone number was not partially encoded as usual (Exp: +84852****96) but fully displayed the phone number.
​

​

Any email address can log in to the “Forgot Password” page, then choose how to verify the account via phone number. This means anyone can log in and get the player’s phone number. This is a pretty serious security error (According to Cnet) when revealing players’ private phone numbers. In addition, according to some users, leaving such open data will make it difficult for this game to enter the EU market – which is famous for its very strict Personal Data Protection Laws.
​

Genshin Impact​

However, many players say that their phone numbers are still properly secured on the game. Explaining this, BBT Emergenceingame.Com thinks that this security error may be related to the login location. As in Indonesia, players said they didn’t get this error. But in some parts of Asia and a small number of places in North America, the phone number is still completely displayed.

​

Genshin Impact​

In fact, this is not the first time this game has received complaints about security. 3 weeks ago, Reddit also posted a similar error with accompanying screenshots. At that time, not many people cared about this issue as much as now.

Until the security is completely overcome, players can protect their accounts and personal information by unlinking the phone number with the game account.
​