Codemasters Pulls Site and Confirms User Data Hack
Site down until later in the year - nothing 'confirmed' stolen.
"Dear valued Codemasters customer" began the ominous statement sent out by Codemasters today that confirmed that "Customer names and addresses, email addresses, telephone numbers, encrypted passwords and order history" in the care of the company have been 'compromised'."
The statement continues:
"On Friday 3rd June, unauthorised entry was gained to our Codemasters.com website. As soon as the intrusion was detected, we immediately took codemasters.com and associated web services offline in order to prevent any further intrusion.
"During the days since the attack we have conducted a thorough investigation in order to ascertain the extent and scope of the breach and have regrettably discovered that the intruder was able to gain access to the following:"
What follows is a saddening list - but the sort of list that it seems is going to become all too familiar in the coming months to gamers and non-gamers alike:
"Access to the Codemasters corporate website and sub-domains.
"Access to the DiRT 3 VIP code redemption page."
That's bad for company and valued customers alike, but then we hit:
"The Codemasters EStore
We believe the following have been compromised: Customer names and addresses, email addresses, telephone numbers, encrypted passwords and order history. Please note that no personal payment information was stored with Codemasters as we use external payment providers, meaning your payment details were not at risk from this intrusion. "
Codemasters CodeM database
Members' names, usernames, screen names, email addresses, date of birth, encrypted passwords, newsletter preferences, any biographies entered by users, details of last site activity, IP addresses and Xbox Live Gamertags are all believed to have been compromised.
Codies have no firm information - for example a call from a hacker - that states that "any of this data was actually downloaded onto an external device," however, "we have to assume that, as access was gained, all of these details were compromised and/or stolen."
Sadly for a company that has done no harm, "The Codemasters.com website will remain offline for the foreseeable future with all Codemasters.com traffic re-directed to the Codemasters Facebook page instead. A new website will launch later in the year."
Read the entire statement here.
Please use this thread to post your comments.
The statement continues:
"On Friday 3rd June, unauthorised entry was gained to our Codemasters.com website. As soon as the intrusion was detected, we immediately took codemasters.com and associated web services offline in order to prevent any further intrusion.
"During the days since the attack we have conducted a thorough investigation in order to ascertain the extent and scope of the breach and have regrettably discovered that the intruder was able to gain access to the following:"
What follows is a saddening list - but the sort of list that it seems is going to become all too familiar in the coming months to gamers and non-gamers alike:
"Access to the Codemasters corporate website and sub-domains.
"Access to the DiRT 3 VIP code redemption page."
That's bad for company and valued customers alike, but then we hit:
"The Codemasters EStore
We believe the following have been compromised: Customer names and addresses, email addresses, telephone numbers, encrypted passwords and order history. Please note that no personal payment information was stored with Codemasters as we use external payment providers, meaning your payment details were not at risk from this intrusion. "
Codemasters CodeM database
Members' names, usernames, screen names, email addresses, date of birth, encrypted passwords, newsletter preferences, any biographies entered by users, details of last site activity, IP addresses and Xbox Live Gamertags are all believed to have been compromised.
Codies have no firm information - for example a call from a hacker - that states that "any of this data was actually downloaded onto an external device," however, "we have to assume that, as access was gained, all of these details were compromised and/or stolen."
Sadly for a company that has done no harm, "The Codemasters.com website will remain offline for the foreseeable future with all Codemasters.com traffic re-directed to the Codemasters Facebook page instead. A new website will launch later in the year."
Read the entire statement here.
Please use this thread to post your comments.
Companies:
Codemasters