Kickstarter hacked, loses control over customer data

In an email with the subject “Important Kickstarter Security Notice” sent to all customers, the CEO of  the company announced that on Wednesday, Feb 12, 2014, law enforcement officials contacted Kickstarter and alerted them that hackers had sought and gained unauthorized access to some of customers’ data.

kickstarter

How come that the law enforcement contacts the company to inform them about the breach? How did they find out that the company was hacked? I asked accountsecurity@kickstarter.com to provide more details. Let’s see if they reply.

Anyway, the good news is:

No credit card data of any kind was accessed by hackers. There is no evidence of unauthorized activity of any kind on your account.

The bad news is:

Accessed information included usernames, email addresses, mailing addresses, phone numbers, and encrypted passwords.

Make sure you change your password. If you used the same password and email address on other services, make sure you create a different password. Here you can learn how to make good passwords.

For more tips how to do this, check http://bit.ly/18qE48B

 

Sorin Mustaca

IT Security Expert

from Avira – TechBlog http://bit.ly/1gJLi8h
via IFTTT


© Copyright 2014 Sorin Mustaca, All rights Reserved. Written For: Sorin Mustaca on Cybersecurity


Check www.endpoint-cybersecurity.com for seeing the consulting services we offer.

Visit www.itsecuritynews.info for latest security news in English
Besuchen Sie de.itsecuritynews.info für IT Sicherheits News auf Deutsch

Related Posts

Viruses and Digital Signatures

Very interesting stuff: http://www.symantec.com/connect/blogs/viruses-and-digital-signatures Although the files are signed, they are signed using an unauthenticated CA (Certificate Authority) which is masquerading as Verisign. A CA is a trusted third party that issues and signs the certificate and vouches for the authenticity of the file. Each CA should be registered and therefore recognized globally as a […]

Opera.com hacked, distributed malware signed with their certificate to probably thousand of users

According to a post on the Opera Security Blog, the company suffered on June 19th “a targeted attack on  internal network infrastructure”. The attackers were able to obtain at least one old and expired Opera code signing certificate, which they have used to sign some malware. This has allowed them to distribute malicious software which incorrectly […]