Codemaster's been hacked..

Mr Krugga · 10 Jun 2011 at 16:16

Their website redirects to their Facebook page?

**** this **** and everything about it :mad:

V_R · 10 Jun 2011 at 16:20

Just got it too, logged into the CM forums as narmal, but go to change my CodeM account pass and it redirects to their FB page! Which BTW says nothing of the hack...

FU Codemasters... :rolleyes:

EDIT: Beaten!

Deific · 10 Jun 2011 at 16:46

I got the email and it says above the email:

This message (email) looks very suspicious to our SmartScreen filters, so we've blocked attachments, pictures, and links for your safety.

prand · 10 Jun 2011 at 16:53

TheCenturion said:
I've changed my email address password, hopefully that'll suffice. I think I used some really random password on the codemasters site anyway. It was only for their forum.

EDIT: I never even bothered to change it from the allocated one that codemasters give you when you sign up. I think I'll be okay.

What I wonder about is: Do they notify you when you change your password?
Because I think I signed up for the Jumpage Evo beta back then but I don't remember if I changed my password, I only got one mail where they sent me the generated, generic password.

Tombo · 10 Jun 2011 at 16:53

Either way, can't hurt to change your password just in case.

And it says encrypted passwords were stolen, I'm taking this to mean if they were taken they won't just be viewable without breaking the encryption but it's just sensible to change your password anyway.

Relentless81 · 10 Jun 2011 at 16:57

I've thinking about this and I had a LOTRO account tied with a COG account, I closed the LOTRO in 2007

What should I be doing?

Tombstone · 10 Jun 2011 at 16:58

Been trying to think of ways in which this impacts me, but luckily I dont think this impacts me all that much. The only thing I used codemasters for was LoTRO and thats migrated to Turbine now, I think its actually the only codemasters related game I have as they tended to do lots of sporting games and I'm not into those.

mrk · 10 Jun 2011 at 16:58

Dirt 3 really that bad huh.

prand · 10 Jun 2011 at 16:58

Tombo said:
Either way, can't hurt to change your password just in case.

And it says encrypted passwords were stolen, I'm taking this to mean if they were taken they won't just be viewable without breaking the encryption but it's just sensible to change your password anyway.

Well, I have a couple of passwords. The thing is I don't know which one I would have change it to on the Codemasters website. It could take a very long time to change all or almost all of my passwords (luckily I used special passwords for some important sites) on different websites.

On the other hand, maybe it's about time to do that. May take one or two hours.

Relentless81 · 10 Jun 2011 at 17:07

Tombstone said:
Been trying to think of ways in which this impacts me, but luckily I dont think this impacts me all that much. The only thing I used codemasters for was LoTRO and thats migrated to Turbine now, I think its actually the only codemasters related game I have as they tended to do lots of sporting games and I'm not into those.

Exactly the same as me, but you still must have had a COG account

Tombstone · 10 Jun 2011 at 18:09

Relentless81 said:
Exactly the same as me, but you still must have had a COG account

I did, but I never used it for anything and the username and password were both unique to it.

Mr Krugga · 10 Jun 2011 at 18:24

Dirt 2, Jumpage Evo beta and LOTRO for me.

Can't remember if any of these, tied to my Codemasters account, exposed any personal information.

Hopefully not but I won't find out until the website is working again.

sniffy · 10 Jun 2011 at 18:48

Must be a zero-day exploit they're using, lulz can't be THAT good.

Deific · 10 Jun 2011 at 18:49

prand said:
Well, I have a couple of passwords. The thing is I don't know which one I would have change it to on the Codemasters website. It could take a very long time to change all or almost all of my passwords (luckily I used special passwords for some important sites) on different websites.

On the other hand, maybe it's about time to do that. May take one or two hours.

Why would you need to change your passwords on various sites? People getting your email address and codemasters password has no impact on your passwords for other sites unless you use the same password for every website.

prand · 10 Jun 2011 at 18:57

Deific said:
Why would you need to change your passwords on various sites? People getting your email address and codemasters password has no impact on your passwords for other sites unless you use the same password for every website.

Not all of my passwords are unique. That means that some of my accounts on other websites may be exposed but since I don't know which password was used for the CodeM account I don't know which accounts I have to modify so it's better to modify all of them, to be on the safe side.

Mr Krugga said:
[...]
Can't remember if any of these, tied to my Codemasters account, exposed any personal information.

Hopefully not but I won't find out until the website is working again.

Same here.
However they only required an email address and a username for the Jumpage Evo beta, I think.
I just hope that I never changed the password and it still used the generic one that was generated.
On this one I am not sure, however. :/

VeNT · 10 Jun 2011 at 19:00

Mr Krugga said:
And nothing to be happy about since it's our data that is being compromised.

a) it was NHS.net a nation wide email system. no patient data is held on there.
b) it's based (afaik) on an exchange backend so I'd expect it to be easy enough to get into.

'Wes · 10 Jun 2011 at 19:02

Mr Krugga said:
LOTRO for me.

No, Turbine have control of the Europe side of LotRO now, you need to migrate your account over to Turbine and Dirt 2 used GFWL.

Relentless81 · 10 Jun 2011 at 19:05

'Wes said:
No, Turbine have control of the Europe side of LotRO now, you need to migrate your account over to Turbine and Dirt 2 used GFWL.

But originally a COG account would have been registered

Amos91 · 10 Jun 2011 at 19:05

Deific said:
Why would you need to change your passwords on various sites? People getting your email address and codemasters password has no impact on your passwords for other sites unless you use the same password for every website.

You just answered your own question. Well done

Mr Krugga · 10 Jun 2011 at 19:16

VeNT said:
a) it was NHS.net a nation wide email system. no patient data is held on there.
b) it's based (afaik) on an exchange backend so I'd expect it to be easy enough to get into.

My reply wasn't post-specific, I just pointed out that there's nothing to be happy about when users' data gets compromised by third parties. I wasn't even implying that he was that it's case-specific to NHS.

Relentless81 said:
But originally a COG account would have been registered

This.

olivercamos said:
You just answered your own question. Well done

I'm pretty sure I wouldn't use the same password for the email account and some generic game account but you can never be sure after two years :/