Giveaway of the Day Forums

1. 

   Anonymous
   Unregistered

   Ubisoft hacked, account info accessed
   An unnamed Ubisoft website has been hacked, and usernames, email addresses and password information has been compromised. Ubisoft claims that no finanical information was obtained but in an "abundance of caution" wants folks to change their passwords.

   Ubisoft's Uplay service, the system housing customer data, is never mentioned specifically. Last year, a browser exploit was identified with the Uplay plug-in that endangered users by allowing certain malicious websites access to player computers.

   Ubisoft introduced Uplay back in 2009 as a cross-game interface allowing for digital distribution and social services across Ubisoft games. In February, Ubisoft added third-party games from studios including EA, Warner Bros. and Focus Home Interactive.

   Update: A Ubisoft representative reached out to say, "The attack did not originate via any Uplay services, the intrusion targeted some of our internal online systems." We've altered the story to reflect this.
   Show full PR text

   We recently found that one of our Web sites was exploited to gain unauthorized access to some of our online systems. We instantly took steps to close off this access, to begin a thorough investigation with relevant authorities, internal and external security experts, and to start restoring the integrity of any compromised systems.

   During this process, we learned that data were illegally accessed from our account database, including user names, email addresses and encrypted passwords. No personal payment information is stored with Ubisoft, meaning debit/credit card information was safe from this intrusion. Out of an abundance of caution, we are recommending all our users change their passwords. We sincerely apologize to them for any inconvenience. Additional information is available here.

   Ubisoft's security teams are constantly exploring all available means to expand and strengthen our security measures against such criminal activities in order to better protect our customers.

   We sincerely apologize for any inconvenience and thank you for your understanding.

   article

   I received an email with a link to put in a new password.

   Posted 10 years ago #
2. 

   mikiem2
   Moderator

   Reading between the lines, "During this process, we learned that data were illegally accessed from our account database...", perhaps more pro cyber-criminals got in & got out as quietly as possible sometime in the past -- stolen user/customer data, like farm produce, has a shelf life, & logically that's shortened if those customers get notified immediately, because they'll start closing/changing accounts.

   So now Ubisoft has one of their sites compromised, calls in the experts, & those experts find that hey, you've had someone in here before.

   Now the questions I'd be asking if I had an account there... If they had access to that portion of Ubisoft's internal networks, could they have monitored bank transactions? Did they have access to enough customer personal info that they could get into customer email accounts? Or was the stolen data used just for targeted spam &/or phishing campaigns?

   Once they get access to your email account they can start monitoring, finding out your banking data, on-line accounts & so on. Since in this hypothetical situation I'm assuming they were after $ rather than bragging rights, they'd either be pretty subtle, skimming a little off lots of people, or gathering data to empty bank accounts etc.

   Posted 10 years ago #

RSS feed for this topic

Reply

You must log in to post.