Sega Hacked, Personal Data Compromised

by Mike Bendel on June 17, 2011 @ 12:30 pm


By way of an official email sent to customers today, Sega confirmed a security breach of its Sega Pass online service. This is the latest in a rash of hacks and DDOS attacks that hit EVE Online, Codemasters, Bethesda, and Sony over the past couple weeks. The infamous LulzSec is not taking credit for this intrusion, however.

According to Sega, an investigation into the extent of this breach is ongoing. Thus far, “a subset of SEGA Pass members emails addresses, dates of birth and encrypted passwords” have been identified as stolen. Sega stresses in the email that passwords were not stored in plaintext. Furthermore, payment information remains safe as the company used external providers to process transactions.

As a precaution, Sega is resetting affected SEGA Pass accounts. Users will be prompted to change password once the service is back online. Read the full email after the break.

As you may be aware, the SEGA Pass system has been offline since yesterday, Thursday 16 June.

Over the last 24 hours we have identified that unauthorised entry was gained to our SEGA Pass database.

We immediately took the appropriate action to protect our consumers’ data and isolate the location of the breach. We have launched an investigation into the extent of the breach of our public systems.

We have identified that a subset of SEGA Pass members emails addresses, dates of birth and encrypted passwords were obtained. To stress, none of the passwords obtained were stored in plain text.

Please note that no personal payment information was stored by SEGA as we use external payment providers, meaning your payment details were not at risk from this intrusion.

If you use the same login information for other websites and/or services as you do for SEGA Pass, you should change that information immediately.

We have also reset your password and all access to SEGA Pass has been temporarily suspended.

Additionally we recommend you please take extra caution if you should receive suspicious emails that ask for personal or sensitive information.

Therefore please do not attempt to login to SEGA Pass at present, we will communicate when the service becomes available.

We sincerely apologise for this incident and regret any inconvenience caused.

We are contacting all our members with these recommendations.

If you have any further questions please contact SEGA customer support on csescalations@sega.com

Follow this author on .

Read more: EA Announces Need for Speed Rivals, Xbox Reveal – Watch it Now!, Gran Turismo 6 Announced, Microsoft Nixes Next Xbox “Always” On, Watch_Dogs Dated for November 19 / 22

Comments
Tavares says:

Why does this keep happening? Really... I don't understand why hackers keep attacking Game companies. Are they trying to make a point? Are they trying to defend the best interests of gamers and consumers?

Seems to be me like they're only pissing off not only the different companies but also law enforcing agencies... Sooner or later they're going to jail. And I'll laugh at that moment....

But of course, I'm only rambling about this because the Sony attack really messed me up.

Zx30 says:

I wonder who's next? :o

Robby says:

Everyone is getting hacked these days.

MenaceInc says:

y’all need to hide your servers, hide your fileshares and hide your passwords cause they’re hackin’ everybody out here

Zx30 says:

No one is safe! O.O

KezraPlanes says:

They're all a bunch of dicks and this is getting ridiculous and out of hand, worse they're doing it just for the lulz, which is the sad part.

Zx30 says:

It could be for the lulz, but at the same time we're seeing how easily companies can be hacked...

eldiablov says:

I think they've made an important point tbh.

elite says:

Maybe they're in contract with an 'other' company who can benefit from these attacks? Those users who will shift from Sega, Sony, or any other company will of course find a better and secure online system. I see Microsoft unhindered by those hackers...

Dan says:

Well Lulzsec have stated they aren't responsible for this one, but still, they're going all out until they get caught.

Admittedly the Tupac article they published after they took down PBS was pretty funny.

you say:

Login with your username and password below. New User?