At least two separate accounts with usernames consisting of long strings of numbers and letters were able to access a private development game of ours’, which group access settings were in place on. Upon checking their profiles, neither of the two accounts were members of our holder group, and both had the same join date of 3/26/2025, wearing similar, new account outfits.
I banned the account, made the game fully private, and shortly after another account joined with a similar username. The second account left within 30 seconds of joining. Neither of the accounts did anything in game further than walking around. According to their user data in game, that was the first time both accounts joined the game.
A private message is associated with this bug report

