Monday, 17 February 2014

Kickstarter Breached, User Data Stolen


Black Hat Hackers damaged the crowed-funding website Kickstarter and stole a lot of user information, but they responded that no credit card information stolen. Hackers only stole the usernames and passwords of the on board accounts because somehow kickstarter never store the full information about the credit cards. Yesterday they’ve identify that hacker hit their data center but not able to access any credit card information because of the fraud prevention techniques by which they’ve encrypted the data with security keys. That encrypted byte is bit of the plus but we can’t deny that any data with right information can be decrypted so you better change your password.

Kickstarter said On Wednesday night, law enforcement officials contacted Kickstarter and alerted us that hackers had sought and gained unauthorized access to some of our customers' data. Upon learning this, we immediately closed the security breach and began strengthening security measures throughout the Kickstarter system. While no credit card data was accessed, some information about our customers was. Accessed information included usernames, email addresses,  phone numbers, and encrypted passwords. Actual passwords were not revealed, however it is possible for a malicious person with enough computing power to guess and crack an encrypted password, particularly a weak or obvious one. We’re incredibly sorry that this happened. We set a very high bar for how we serve our community, and this incident is frustrating. We have since improved our security procedures and systems, and we will continue to do so.

It is good to be adopting technology but it has come with a dark side so people should take proper precaution to prevent such incident in future. Company was alerted by law enforcement officials but how we can trust these companies with our money? They should take legitimatehacking prevention technology to prevent hackers.

Here is the full report

No comments:

Post a Comment