Welcome to Jellyneo.net!

A new selection of items are available at Dyeworks in the NC Mall! These items will only be available to dye until August 21st.

For Peophin Day, a new colour is available (watch for drips):


And a Cowhand-themed outfit is available and active:

Neopets has just emailed a newsletter on everything they have in store for San Diego Comic Con. They have quite a bit in store this year:

From July 21-24, we will be sharing booth number 929 (along the main aisle) with What's Your Passion Jewelry. Make sure you stop by to get some EXCLUSIVE Neopets swag, including WYP jewelry, some limited edition pins, plush and Upper Deck exclusive giveaway! More details to come, so make sure you follow us on our social media accounts to keep up!

What's Your Passion Jewelry will be selling four exclusive enamel pins at their booth. Should these pins sell out, they will be available for pre-order online.


Can't attend SDCC? No worries, the pins will be available online along with 200 swag gift sets starting at 5:00 PM NST on July 20th. Use code SDCC with any $50+ Neopets purchase to receive a FREE Rainbow Paint Brush pin and lanyard. Gift set must be added to your cart for the code to work. Plus, during the convention, all Neopets Jewelry is 20% off on their website.

You may have heard recently that Neopets is launching a new wave of collectible cards, this time by Upper Deck.

Upper Deck Neopets Exclusives
Neopets trading cards have landed on Upper Deck e-Pack®! Read more about the upcoming Neopets trading cards here! Meanwhile, get ready for new Weekly Products on e-PackTM by getting your hands on these Neopets event exclusives. We created a physical 9-card sheet which features 8 Neopets Faerie trading cards. These 9-card sheets will be available at Comic-Con 2022!

In addition to these physical cards, there are 3 digital cards that can be redeemed by anyone with an Upper Deck e-Pack account (accounts are free). Create an account and visit this link to redeem Fyora, Illere, and Darkest Faerie cards. It is likely possible that for an extra fee, you can choose to receive these cards physically, so we recommend you redeem them now if you love collecting Neopets cards. Only one card pack can be redeemed per person.

The back of these 9-card sheets has a QR code that allows collectors to redeem an exclusive 3-card set. e-PackTM users can now redeem these exclusives by clicking the link below or scanning the QR code. These exclusives will only be available until July 30th so redeem them now.

Where else can you get them?

Collectors will have another chance to get the physical 9-card sheet and redeem the three-card e-PackTM set by visiting Neopets’ booth, #929, or Upper Deck’s booth, #307, during Comic-Con. A limited number of sheets will be handed out each day so be sure to get them before they’re gone.

Visiting the Neopets Booth at SDCC? Jellyneo needs your help adding to our SDCC coverage article! Please send us photos of the booth and swag as well as any information on the activities there.

The final free cake has been released at the NC Mall to celebrate its 15th birthday!


Eating the cake will increase your Neopet's strength by 4, and grant the following item:


As with other NC Mall freebies, it is okay to claim this item on your side accounts.

UPDATE, July 25th, 3:30 PM NST: There have been no further updates regarding the breach by TNT, nor any firm confirmations that the vulnerability has been patched.

---

UPDATE, July 21st, 11:30 PM NST: As of approximately 10:50 PM NST tonight, upon visiting any Neopets.com page you will first be greeted with the following Important Announcement, which is the same text we have seen as the first official announcement yesterday (and also repeated in today's New Features.)


Just click to "Continue To Site" as we've yet to receive confirmation that the vulnerability has been patched.

---

UPDATE, July 21st, 7:30 PM NST: There have been no further updates regarding the breach today by TNT, nor any firm confirmations that the vulnerability has been patched.

---

UPDATE, July 20th, 7:43 PM NST: TNT has posted a statement to Twitter and to the Neoboards about the breach. Their statement doesn't seem to confirm that the vulnerability has been patched. They have also not confirmed the safety of Premium/Neocash payment methods (we've been asked this a lot by Neopians and specifically escalated this issue with TNT—we don't believe payment methods were breached, but we're only fansite volunteers, not TNT and would like them to confirm).

The tweet and Neoboard message:

Neopets recently became aware that customer data may have been stolen. We immediately launched an investigation assisted by a leading forensics firm. We are also engaging law enforcement and enhancing the protections for our systems and our user data. (1/3)

It appears that email addresses and passwords used to access Neopets accounts may have been affected. We strongly recommend that you change your Neopets password. If you use the same password on other websites, we recommend that you also change those passwords. (2/3)

As our investigation continues, we will update you as appropriate. We truly appreciate your patience and understanding at this time. Thank you. (3/3)

As per TNT's suggestions, we recommend you update your password (via "My Profile"). However, since TNT has not confirmed that the vulnerability has been patched, be prepared to change it again once we get the all clear.


If you share your Neopets password with any other website, you should change that immediately.

---

UPDATE, July 20th, 12:48 PM NST: TNT member Willow has issued a statement regarding the active breach:

Hi everyone— we’re aware of the data breach and are actively working on it. Will provide more information ASAP.

We'll keep you updated as TNT posts more. Until then, please read below on how you should be making sure your other web accounts are secure and do not share login information with your Neopets account(s). Since this is an active, unpatched breach, changing your Neopets password or PIN is not advisable at the moment.

---

We have some serious news today. Thanks to an anonymous tipster, we've been made aware that the database and source code for Neopets.com has been breached, and over 69,000,000 user accounts have been exposed.

Full account information, such as email address, passwords, gender, IP addresses, countries, and birthdays are available for sale on a hacker website.

Access to the full database and a copy of Neopets.com source code is being offered for 4 Bitcoin (~$94,500 USD at time of writing). For an additional fee, the seller is offering live access to the database.

You may have read or heard of some reddit posts being made over the past few months by a user who claims to have had live access to the Neopets database and source code since late last year. (Posting about things such as users who gamed the Mystery Pic contest with the Scary Tree Stamp as a prize, or users who have been shadowbanned from the Altador Cup.) TNT has failed to address this security leak, and now we're finding someone else selling access on the black market.

What Can I Do to Protect My Account?
Due to the nature of live access being available, we do not recommend changing your account password or PIN at this time. (The hacker and/or buyer could just get a new copy of whatever you changed your password to with their live access.) We will post an update when it's safe to update your account credentials.

This isn't the first time the Neopets.com site has been breached, and is likely not the last. We cannot emphasize enough that you should be using unique passwords across every website. If you share your Neopets.com password with any other websites, those accounts are highly at risk. Paying $95k to hack Neopets accounts seems pricey, but the value in a purchase like this will be the ability to test your Neopets.com password on many other sites in brute force attacks.

If you share your Neopets.com password with any other website, update the password on those other sites immediately. You should also consider upgrading your digital lifestyle to include a password manager, such as 1Password, which stores unique hard-to-guess passwords for you and will greatly reduce your risk going forward.