Sega Pass Hacked
Options
Hackers breach Sega Pass database, but no payment data was taken.
Sega has sent out an email to registered users of its Sega Pass warning them of an "unauthorised entry" into their database. This accounts for the fact that the service has been offline since yesterday, the 16th June.
It does not outline the extent of the breach, but it does note that no payment information was stored on the database, so no personal financial information could have been taken. Sega advises registered users to change any similar passwords used on other sites immediately. Sega Pass passwords have been automatically reset. We've included the full text of the email below.
This, of course, is the latest in a seemingly endless line of breaches as the games industry struggles to combat a hacking outbreak started last year as a result of the Sony vs GeoHot court case, which was eventually settled out of court on undisclosed terms. Bethesda, the Minecraft servers and CCP's Eve Online are also recent victims. LulzSec, an anarchic hacker activist group, has claimed responsibility for many of the breaches. Will it ever end?
As you may be aware, the SEGA Pass system has been offline since yesterday, Thursday 16 June.
Over the last 24 hours we have identified that unauthorised entry was gained to our SEGA Pass database.
We immediately took the appropriate action to protect our consumers' data and isolate the location of the breach. We have launched an investigation into the extent of the breach of our public systems.
We have identified that a subset of SEGA Pass members emails addresses, dates of birth and encrypted passwords were obtained. To stress, none of the passwords obtained were stored in plain text.
Please note that no personal payment information was stored by SEGA as we use external payment providers, meaning your payment details were not at risk from this intrusion.
If you use the same login information for other websites and/or services as you do for SEGA Pass, you should change that information immediately.
We have also reset your password and all access to SEGA Pass has been temporarily suspended.
Additionally we recommend you please take extra caution if you should receive suspicious emails that ask for personal or sensitive information.
Therefore please do not attempt to login to SEGA Pass at present, we will communicate when the service becomes available.
We sincerely apologise for this incident and regret any inconvenience caused.
We are contacting all our members with these recommendations.
If you have any further questions please contact SEGA customer support on csescalations@sega.com
Sega has sent out an email to registered users of its Sega Pass warning them of an "unauthorised entry" into their database. This accounts for the fact that the service has been offline since yesterday, the 16th June.
It does not outline the extent of the breach, but it does note that no payment information was stored on the database, so no personal financial information could have been taken. Sega advises registered users to change any similar passwords used on other sites immediately. Sega Pass passwords have been automatically reset. We've included the full text of the email below.
This, of course, is the latest in a seemingly endless line of breaches as the games industry struggles to combat a hacking outbreak started last year as a result of the Sony vs GeoHot court case, which was eventually settled out of court on undisclosed terms. Bethesda, the Minecraft servers and CCP's Eve Online are also recent victims. LulzSec, an anarchic hacker activist group, has claimed responsibility for many of the breaches. Will it ever end?
As you may be aware, the SEGA Pass system has been offline since yesterday, Thursday 16 June.
Over the last 24 hours we have identified that unauthorised entry was gained to our SEGA Pass database.
We immediately took the appropriate action to protect our consumers' data and isolate the location of the breach. We have launched an investigation into the extent of the breach of our public systems.
We have identified that a subset of SEGA Pass members emails addresses, dates of birth and encrypted passwords were obtained. To stress, none of the passwords obtained were stored in plain text.
Please note that no personal payment information was stored by SEGA as we use external payment providers, meaning your payment details were not at risk from this intrusion.
If you use the same login information for other websites and/or services as you do for SEGA Pass, you should change that information immediately.
We have also reset your password and all access to SEGA Pass has been temporarily suspended.
Additionally we recommend you please take extra caution if you should receive suspicious emails that ask for personal or sensitive information.
Therefore please do not attempt to login to SEGA Pass at present, we will communicate when the service becomes available.
We sincerely apologise for this incident and regret any inconvenience caused.
We are contacting all our members with these recommendations.
If you have any further questions please contact SEGA customer support on csescalations@sega.com