Credential stuffing bots can run through millions of username/password pairs in minutes. A single exposed Animal Jam password can lead to:

However, the damage was done. While new passwords on new accounts are safe, You cannot "un-leak" a plain text password.

Even though passwords were stored in a scrambled format (bcrypt hashing), many players—especially children—use weak or common passwords. Hackers can run automated tools to guess simple passwords like “password123,” “jammer2020,” or a pet’s name in seconds.