SEGA Hit By Hackers, SEGA Pass Data Stolen
Well we should have perhaps bet on it… but SEGA are the latest to be hit by the current ‘craze’ of hitting major computer game companies with hacks. SEGA have issued an email to users regarding their SEGA Pass which would include SEGA Play service and possibly their forums, admitting it has been hacked.
As you may be aware, the SEGA Pass system has been offline since yesterday, Thursday 16 June.
Over the last 24 hours we have identified that unauthorised entry was gained to our SEGA Pass database.
We immediately took the appropriate action to protect our consumers’ data and isolate the location of the breach. We have launched an investigation into the extent of the breach of our public systems.
We have identified that a subset of SEGA Pass members emails addresses, dates of birth and encrypted passwords were obtained. To stress, none of the passwords obtained were stored in plain text.
Please note that no personal payment information was stored by SEGA as we use external payment providers, meaning your payment details were not at risk from this intrusion.
If you use the same login information for other websites and/or services as you do for SEGA Pass, you should change that information immediately.
We have also reset your password and all access to SEGA Pass has been temporarily suspended.
Additionally we recommend you please take extra caution if you should receive suspicious emails that ask for personal or sensitive information.
Therefore please do not attempt to login to SEGA Pass at present, we will communicate when the service becomes available.
We sincerely apologise for this incident and regret any inconvenience caused.
We are contacting all our members with these recommendations.
If you have any further questions please contact SEGA customer support on csescalations@sega.com
It is not clear whether this hack was attributable to the Lulzsec group at this time. Ironically a lot of responses on social media at the moment are asking what SEGA Pass is, as since it’s inception several years ago it has rarely been used by the company.
Users are advised to change their login details for other websites/services if it shared same as login as their SEGA Pass details.
UPDATE:
Lulzsec have actually commented on the SEGA situation, messaging SEGA over Twitter with the following:
@Sega – contact us. We want to help you destroy the hackers that attacked you. We love the Dreamcast, these people are going down.
So I guess its wasn’t them!
Lulzsec announced a while back that they wouldn’t steal data from SEGA or Nintendo because they love them. If they actually hit, they’d be breaking a promise.
I don’t like it when people break promises…