hot  /  reviews  /  video  /  blogs  /  forum

Sega warns of 'Sega Pass' database hack

12:50 PM on 06.17.2011 // Nick Chester

Sega has sent out emails to members of its Sega Pass online network to warn of a recent breach of data.

"Over the last 24 hours we have identified that unauthorized entry as gained to our Sega Pass database," the email reads.

The company is still looking into the extent of the breach, but says that a "subset of Sega pass members email addresses, dates of birth and encrypted passwords were obtained." It also makes it clear that of the passwords obtained, none were stored in plain text.

Additionally, no personal payment information was obtained as the company uses "external payment providers."

Hacker group Lulz Security, who has been behind a recent wave of online attacks, says it's not responsible.

"Sega, contact us," it said on its Twitter account, "We want to help you destroy the hackers that attacked you. We love the Dreamcast, these people are going down."

The full email to members Sega sent out to Sega Pass members can be found below.

Dear [User],

As you may be aware, the SEGA Pass system has been offline since yesterday, Thursday 16 June.

Over the last 24 hours we have identified that unauthorised entry was gained to our SEGA Pass database.

We immediately took the appropriate action to protect our consumers’ data and isolate the location of the breach. We have launched an investigation into the extent of the breach of our public systems.

We have identified that a subset of SEGA Pass members emails addresses, dates of birth and encrypted passwords were obtained. To stress, none of the passwords obtained were stored in plain text.

Please note that no personal payment information was stored by SEGA as we use external payment providers, meaning your payment details were not at risk from this intrusion.

If you use the same login information for other websites and/or services as you do for SEGA Pass, you should change that information immediately.

We have also reset your password and all access to SEGA Pass has been temporarily suspended.

Additionally we recommend you please take extra caution if you should receive suspicious emails that ask for personal or sensitive information.

Therefore please do not attempt to login to SEGA Pass at present, we will communicate when the service becomes available.

We sincerely apologise for this incident and regret any inconvenience caused.

We are contacting all our members with these recommendations.

If you have any further questions please contact SEGA customer support on [email protected]

[Thanks to everyone who sent this in!]

 




 Reblog (or) Blog Reply

Nick Chester, Former Editor-in-Chief (2011)
 Follow Blog + disclosure Tips
Editor-in-Chief @ Destructoid.com nick at destructoid.com  more   |   staff directory

Get more destructoid:   We're indie-run, blogging for the love of it, and our site will always be free. Optionally, you can support us and get: (1) Faster pages from our cloud server (3) Wide(r)screen (3) No big ads on Dtoid, Japanator, Tomopop, or Flixist (4) Auto contest entries, and (5) Dibs on betas & downloads. Try it out

 Setup email comments

Unsavory comments? Please report harassment, spam, and hate speech to our moderators, and flag the user (we will ban users dishing bad karma). Can't see comments? Apps like Avast or browser extensions can cause it. You can fix it by adding *.disqus.com to your whitelists.


  Around the web (login to improve these)




Back to Top


We follow moms on   Facebook  and   Twitter
  Light Theme      Dark Theme
Pssst. Konami Code + Enter?
You may remix stuff our site under creative commons w/@
- Destructoid means family. Living the dream, since 2006 -