Kickstarter Security Breach Exposes Customer Data

Posted by Soulskill on Saturday February 15, 2014 @04:10PM from the if-only-there-were-a-way-to-crowdfund-better-security-precautions dept.

New submitter jbov writes "Kickstarter members received an e-mail at about 16:40 EST notifying them of a security breach. According to the e-mail, information including user names, encrypted passwords, mailing addresses, and phone numbers may have been revealed. Kickstarter members were urged to change their passwords. 'Older passwords were uniquely salted and digested with SHA-1 multiple times. More recent passwords are hashed with bcrypt.' Kickstarter claims that credit card information was not accessed during the breach. According to Kickstarter, law enforcement officials contacted the company on Wednesday night and alerted them that 'hackers had sought and gained unauthorized access to some of our customers' data.' Upon learning of the breach, Kickstarter closed the security breach and began strengthening security measures."

2 of 63 comments (clear)

Min score:

Reason:

Sort:

Re:Was that ALL? by dbc · 2014-02-15 17:51 · Score: 4, Informative

Ummmm.... no, Amazon stores your Amazon acount info. KS doesn't even store whole credit card numbers.
Re:at least .. by Jarik+C-Bol · 2014-02-15 18:00 · Score: 5, Informative

Not only did Adobe email me and send me a letter about the whole thing, they gave me a free year subscription to Experian's identity theft protection services.Makes me wonder just how much info they lost about me.

--
I've decided to Diversify my Holdings. I've divided my cash between my left and right pockets, instead of all in one.