Information Kickstarter hacked.

[SuicideBunny]

Tags: Kickstarter

Let's be honest, your password was probably weak and needed changing anyway.

On Wednesday night, law enforcement officials contacted Kickstarter and alerted us that hackers had sought and gained unauthorized access to some of our customers' data. Upon learning this, we immediately closed the security breach and began strengthening security measures throughout the Kickstarter system.

No credit card data of any kind was accessed by hackers. There is no evidence of unauthorized activity of any kind on all but two Kickstarter user accounts.​

Read more and change your passwords here.

Thanks ihavetoomuchtimeforthiscrap​

 

[Humanity has risen!]

Doofuses like these who are careless enough to let their customers data leaked need to be hit with onerous class action lawsuits and be forced to cover real-time credit analysis for years. They'll think twice about skimping on security.

 

[GlutenBurger]

Did anybody receive an email about this? Because the first time I'm hearing about it is here right now, and they say they were alerted to it on Wednesday.

 

[eric__s]

Did anybody receive an email about this? Because the first time I'm hearing about it is here right now, and they say they were alerted to it on Wednesday.

I didn't get one and I ran a kickstarter campaign. This is the first I'm hearing about it!

Pretty fucking concerning!

 

[Scruffy]

Did anybody receive an email about this? Because the first time I'm hearing about it is here right now, and they say they were alerted to it on Wednesday.

i did receive it

 

[MaskedMan]

I got an email. I also noticed I got logged out today, guess this is why.

 

[SuicideBunny]

they might have to send out mails in volumes to not be blocked as spammers and it might take a while, given how large the userbase is bound to be. pinned it just to make sure.

 

[Infinitron]

What's with the front page hysteria

 

[Scruffy]

What's with the front page hysteria

more like useful news
maybe?
no?

 

[Severian Silk]

VD is a member there. Maybe they found out his real name?

 

[Excidium]

 

[tuluse]

'

Does "credit card information" does not include some of these items?

Kickstarter doesn't keep credit card information. They use 3rd party services to handle payments.

 

[DarkUnderlord]

On Wednesday night, law enforcement officials contacted Kickstarter and alerted us that hackers had sought and gained unauthorized access to some of our customers' data.​

What? How on Earth are law enforcement the ones to find out first?

 

[Severian Silk]

On Wednesday night, law enforcement officials contacted Kickstarter and alerted us that hackers had sought and gained unauthorized access to some of our customers' data.​

What? How on Earth are law enforcement the ones to find out first?

The cops spotted their getaway car.

 

[tuluse]

Even for non-US campaigns that don't use amazon payments?

I'm not sure how they do that.

 

[Doctor Sbaitso]

Doofuses like these who are careless enough to let their customers data leaked need to be hit with onerous class action lawsuits and be forced to cover real-time credit analysis for years. They'll think twice about skimping on security.

Actually considering only password hashes were taken and no card information, recovering so quickly is solid. That is if the disclosure is full. It could have been.much worse and all things considered I suspect they can demonstrate substantive measures taken and enacted in quick fashion.

 

[VioletShadow]

I didn't receive an email either.

 

[Severian Silk]

We're all screwed in the long run though.

 

[ghostdog]

On other news :

A game called "Escape From Population Earth" got funded on Wednesday, by doubling its $1.000.000 goal. It broke a new record by having only two funders.
Elusive developer "PerPros" stated : "No punches pulled".

 

[VioletShadow]

On other news :

A game called "Escape From Population Earth" got funded on Wednesday, by doubling its $1.000.000 goal. It broke a new record by having only two funders.
Elusive developer "PerPros" stated : "No punches pulled".

 

[cutterjohn]

Fuck this! KS are ENTIRE ASSHOLEZ as shitty crap projectz that don't do shit shit can getz you cenzored for telling teh truth, and every other projectz afterwardz ain't gettingz moniez... Justin Barwik(or WTF his surname is) I'm looking at yer sorriez ass as you still have NOT delivered a WORKINGZ product(unless yer happy with faulty buttonz and 2y latez)...

 

[Humanity has risen!]

Doofuses like these who are careless enough to let their customers data leaked need to be hit with onerous class action lawsuits and be forced to cover real-time credit analysis for years. They'll think twice about skimping on security.

Actually considering only password hashes were taken and no card information, recovering so quickly is solid. That is if the disclosure is full. It could have been.much worse and all things considered I suspect they can demonstrate substantive measures taken and enacted in quick fashion.

For the people who have had their name, address, etc taken, there is no defense against it, and it can get them victimized through identity theft.

And of course those who had their e-mail address stolen will receive a mountain of spam and nigerian scams.

cboyardee and Vault Dweller will both have male escorts sent to their houses

 

[imweasel]

Here is the E-Mail in case you haven't seen it. "We so sorry, we luv you long time":

Spoiler

Kickstarter isn't very secure as it seems. Just recently a fellow Codexer posted about the (now closed) security hole he used to sniff around in Brian Fargo's account.

 

[Zetor]

They get a (somewhat tarnished) gold star for actually using bcrypt (and salt) to store passwords, however.

 

[Kz3r0]

Pre-paid cards, how do they work?