E-mail from Codemasters - Gaming

gother · 10-06-2011, 14:45

Anyone else had this e-mail?

-e-mail-

Important information regarding your account

Dear valued Codemasters customer,

On Friday 3rd June, unauthorised entry was gained to our Codemasters.com website. As soon as the intrusion was detected, we immediately took codemasters.com and associated web services offline in order to prevent any further intrusion.

During the days since the attack we have conducted a thorough investigation in order to ascertain the extent and scope of the breach and have regrettably discovered that the intruder was able to gain access to the following:

Codemasters.com website

Access to the Codemasters corporate website and sub-domains.

DiRT 3 VIP code redemption page

Access to the DiRT 3 VIP code redemption page.

The Codemasters EStore

We believe the following have been compromised: Customer names and addresses, email addresses, telephone numbers, encrypted passwords and order history. Please note that no personal payment information was stored with Codemasters as we use external payment providers, meaning your payment details were not at risk from this intrusion.

Codemasters CodeM database

Members' names, usernames, screen names, email addresses, date of birth, encrypted passwords, newsletter preferences, any biographies entered by users, details of last site activity, IP addresses and Xbox Live Gamertags are all believed to have been compromised.

Whilst we do not have confirmation that any of this data was actually downloaded onto an external device, we have to assume that, as access was gained, all of these details were compromised and/or stolen.

The Codemasters.com website will remain offline for the foreseeable future with all Codemasters.com traffic re-directed to the Codemasters Facebook page instead. A new website will launch later in the year.

Advice

For your security, in the first instance we advise you to change any passwords you have associated with other Codemasters accounts. If you use the same login information for other sites, you should change that information too. Furthermore, be extra cautious of potential scams, via email, phone, or post that ask you for personal or sensitive information. Please note that Codemasters will never ask you for any payment data such as credit card numbers or bank account details, nor will Codemasters ask you for passwords or other personal identifying data. Be aware too of fraudulent emails that may outwardly appear to be from Codemasters with links inviting you to visit websites. The safest way to visit your favourite websites is always by typing in the address manually into the address bar of your browser.

Unfortunately, Codemasters is the latest victim in on-going targeted attacks against numerous game companies. We assure you that we are doing everything within our legal means to track down the perpetrators and take action to the full extent of the law.

We apologise for this incident and regret any inconvenience caused.

We are contacting all customers who may have been affected directly.

Should you have any concerns or wish to speak to a member of our Customer Services team, please email them at custservice@codemasters.com.

Mandark · 10-06-2011, 15:03

You beat me to it. I posted in Playstation forum by mistake. Yep, hacked again.

scooby1970 · 10-06-2011, 15:06

Just had this email too! What is the World coming to?

Mark

Mandark · 10-06-2011, 15:07

It's only a matter of time before they get Xbox Live. I bet it's secretly under attack.

nightporter · 10-06-2011, 15:08

Yeah, got it to.

davethorp · 10-06-2011, 15:23

Yep also got it. It's nonstop!

wiseguy100 · 10-06-2011, 16:02

should i change my youtube password? cos of the youtube upload feature.

Mandark · 10-06-2011, 16:02

Yes, the BBC (and Sky News TV - yellow banner treatment!

) running with the story now!
http://www.bbc.co.uk/news/technology-13731822

Mandark · 10-06-2011, 16:06

Quote:

Originally Posted by wiseguy100

should i change my youtube password? cos of the youtube upload feature.

Probably. I guess they could in theory upload illegal stuff your account getitng you into trouble.

I was with Codemasters primarily for Lord of the Rings Online but you had to be a Code M member. Funnily enough there's just been a migration of European players to Turbine, the developers, who will take sole charge of the game from now on. Glad I used a new username and password for that site.

Mandark · 10-06-2011, 16:47

And DS have it.
http://www.digitalspy.co.uk/gaming/n...ta-stolen.html

gother · 10-06-2011, 16:48

I actually can't remember why i registered with Codemasters. The only game that springs to mind is Race driver Grid.
I can't even remember my log in info lol.

jim_uk · 10-06-2011, 17:20

A week to tell us, yet another company more worried about their image than the security of their customers.

Mandark · 10-06-2011, 17:37

The new thing seems to take your site completely offline for ages until something more secure can be put up. That would be a disaster for the likes of EA with its big online retail division. You wouldn't be able to do all that Sims trading and stuff!

FunkmasterT · 10-06-2011, 17:44

I got the same email. I had no idea I even had an account with them.

NorfolkBoy1 · 10-06-2011, 18:29

Quote:

Originally Posted by jim_uk

A week to tell us, yet another company more worried about their image than the security of their customers.

A week is a pretty good timescale on the whole scheme of things, enough time to find out what happened. Wouldn't you rather they tell you what's actually happened rather than tell you what might have happened and get you all in a panic?

Take CitiBank, for example, one of the biggest financial institutions in the world. They lost 100,000 sets of credit card details and took A WHOLE MONTH to tell anyone.

http://online.wsj.com/article/SB1000...873193624.html

That makes Sony and Codemasters look positively Usain Bolt-Like in their reaction time IMHO.

jim_uk · 10-06-2011, 19:32

Quote:

Originally Posted by NorfolkBoy1

A week is a pretty good timescale on the whole scheme of things, enough time to find out what happened. Wouldn't you rather they tell you what's actually happened rather than tell you what might have happened and get you all in a panic?

Take CitiBank, for example, one of the biggest financial institutions in the world. They lost 100,000 sets of credit card details and took A WHOLE MONTH to tell anyone.

http://online.wsj.com/article/SB1000...873193624.html

That makes Sony and Codemasters look positively Usain Bolt-Like in their reaction time IMHO.

Once they know they've been compromised they should let people know there and then just in case they've used the same username password combination elsewhere.

ScubaSteve21 · 10-06-2011, 21:42

Just curious but I have Operation Flashpoint (both games) for Xbox so I was wondering if I.will meed to change my Xbox password or anything? I never registered on their website so am I safe?

jim_uk · 11-06-2011, 02:12

http://uk.pc.ign.com/articles/117/1175351p1.html

Epic games as well.

@ScubaSteve21 You'll be fine.

10-06-2011, 14:45	#1
gother Forum Member Join Date: Jan 2006 Location: Concrete Jungle Services: VM BB L TV XL PHONE M , ps3 250gb ps3 id=thegame2k0 , Iphone3GS Posts: 2,540	E-mail from Codemasters Anyone else had this e-mail? -e-mail- Important information regarding your account Dear valued Codemasters customer, On Friday 3rd June, unauthorised entry was gained to our Codemasters.com website. As soon as the intrusion was detected, we immediately took codemasters.com and associated web services offline in order to prevent any further intrusion. During the days since the attack we have conducted a thorough investigation in order to ascertain the extent and scope of the breach and have regrettably discovered that the intruder was able to gain access to the following: Codemasters.com website Access to the Codemasters corporate website and sub-domains. DiRT 3 VIP code redemption page Access to the DiRT 3 VIP code redemption page. The Codemasters EStore We believe the following have been compromised: Customer names and addresses, email addresses, telephone numbers, encrypted passwords and order history. Please note that no personal payment information was stored with Codemasters as we use external payment providers, meaning your payment details were not at risk from this intrusion. Codemasters CodeM database Members' names, usernames, screen names, email addresses, date of birth, encrypted passwords, newsletter preferences, any biographies entered by users, details of last site activity, IP addresses and Xbox Live Gamertags are all believed to have been compromised. Whilst we do not have confirmation that any of this data was actually downloaded onto an external device, we have to assume that, as access was gained, all of these details were compromised and/or stolen. The Codemasters.com website will remain offline for the foreseeable future with all Codemasters.com traffic re-directed to the Codemasters Facebook page instead. A new website will launch later in the year. Advice For your security, in the first instance we advise you to change any passwords you have associated with other Codemasters accounts. If you use the same login information for other sites, you should change that information too. Furthermore, be extra cautious of potential scams, via email, phone, or post that ask you for personal or sensitive information. Please note that Codemasters will never ask you for any payment data such as credit card numbers or bank account details, nor will Codemasters ask you for passwords or other personal identifying data. Be aware too of fraudulent emails that may outwardly appear to be from Codemasters with links inviting you to visit websites. The safest way to visit your favourite websites is always by typing in the address manually into the address bar of your browser. Unfortunately, Codemasters is the latest victim in on-going targeted attacks against numerous game companies. We assure you that we are doing everything within our legal means to track down the perpetrators and take action to the full extent of the law. We apologise for this incident and regret any inconvenience caused. We are contacting all customers who may have been affected directly. Should you have any concerns or wish to speak to a member of our Customer Services team, please email them at custservice@codemasters.com.

10-06-2011, 15:03	#2
Mandark Forum Member Join Date: Feb 2003 Location: Derby Services: Sky HD, Freeview, Aol, Xbox, PS3, iPad, iPhone, Google Nexus 1 Posts: 10,429	You beat me to it. I posted in Playstation forum by mistake. Yep, hacked again.

10-06-2011, 15:06	#3
scooby1970 Forum Member Join Date: Jun 2003 Location: Neath & Aberaeron Services: PS3=scooby1970 : Xbox360 250GB : Windows 7: Ubuntu : Android : DAB Posts: 1,730 Blog Entries: 2	Just had this email too! What is the World coming to? Mark

10-06-2011, 15:07	#4
Mandark Forum Member Join Date: Feb 2003 Location: Derby Services: Sky HD, Freeview, Aol, Xbox, PS3, iPad, iPhone, Google Nexus 1 Posts: 10,429	It's only a matter of time before they get Xbox Live. I bet it's secretly under attack.

10-06-2011, 15:08	#5
nightporter Forum Member Join Date: Jan 2004 Location: Doncaster Services: Virgin Media XL , 10mb BB, TV Drive, PS3, 37" LCD Posts: 591	Yeah, got it to.

10-06-2011, 15:23	#6
davethorp Forum Member Join Date: Mar 2007 Location: Preston, Lancashire Services: Sky: Sky World, Sky+HD, Sky+, multiroom, skytalk freetime & BB Unlimited Posts: 4,977	Yep also got it. It's nonstop!

10-06-2011, 16:02	#7
wiseguy100 Forum Member Join Date: Feb 2010 Location: Hull, England Services: xbox360/PS3 ID - wiseguy100 Posts: 585	should i change my youtube password? cos of the youtube upload feature.

10-06-2011, 16:47	#10
Mandark Forum Member Join Date: Feb 2003 Location: Derby Services: Sky HD, Freeview, Aol, Xbox, PS3, iPad, iPhone, Google Nexus 1 Posts: 10,429	And DS have it. http://www.digitalspy.co.uk/gaming/n...ta-stolen.html

10-06-2011, 16:48	#11
gother Forum Member Join Date: Jan 2006 Location: Concrete Jungle Services: VM BB L TV XL PHONE M , ps3 250gb ps3 id=thegame2k0 , Iphone3GS Posts: 2,540	I actually can't remember why i registered with Codemasters. The only game that springs to mind is Race driver Grid. I can't even remember my log in info lol.

10-06-2011, 17:20	#12
jim_uk Forum Member Join Date: Jan 2007 Location: Watford Services: HTC Desire Virgin30Mb Technomate6900HD+ 42e-30w Posts: 12,162	A week to tell us, yet another company more worried about their image than the security of their customers.

10-06-2011, 17:37	#13
Mandark Forum Member Join Date: Feb 2003 Location: Derby Services: Sky HD, Freeview, Aol, Xbox, PS3, iPad, iPhone, Google Nexus 1 Posts: 10,429	The new thing seems to take your site completely offline for ages until something more secure can be put up. That would be a disaster for the likes of EA with its big online retail division. You wouldn't be able to do all that Sims trading and stuff!

10-06-2011, 17:44	#14
FunkmasterT Forum Member Join Date: Dec 2007 Location: Scotland Services: Keeping secrets, drinking vodka Posts: 12,785 Blog Entries: 7	I got the same email. I had no idea I even had an account with them.

10-06-2011, 21:42	#17
ScubaSteve21 Forum Member Join Date: Jun 2004 Location: Centre of the Universe! Services: XBox 360 Rules Posts: 2,820	Just curious but I have Operation Flashpoint (both games) for Xbox so I was wondering if I.will meed to change my Xbox password or anything? I never registered on their website so am I safe?

11-06-2011, 02:12	#18
jim_uk Forum Member Join Date: Jan 2007 Location: Watford Services: HTC Desire Virgin30Mb Technomate6900HD+ 42e-30w Posts: 12,162	http://uk.pc.ign.com/articles/117/1175351p1.html Epic games as well. @ScubaSteve21 You'll be fine.