Cryptic Studios warns of database hacking

Cryptic Studios – the developer behind Star Trek Online, City of Heroes and Champions Online – has sent out a notice to customers after discovering a breach of its security from 2010. In a statement released earlier today, Cryptic said that an unauthorized access occurred in December 2010, and this evidence has only come to light due to increased security analysis.

The studio behind Star Trek Online, City of Heroes and Champions Online has sent out a notice to customers after discovering a breach of its security from 2010.

In a statement released earlier today, Cryptic Studios said that an unauthorized access occurred in December 2010, and this evidence has only come to light due to increased security analysis.

The studio says that the intruder gained access to user account names, handles, and encrypted passwords.

"Even though the passwords were encrypted, it is apparent that the intruder has been able to crack some portion of the passwords in this database," Cryptic Studios said in its statement.

"All accounts that we believe were present in the database have had the passwords reset, and customers registered to these accounts have been notified via e-mail of this incident."

Cryptic Studios says there is currently no evidence that the intruder took any other information, although they are not ruling out the possibility of additional account information being taken.

"If they did so," the statement continues, "the first and last name, e-mail address, date of birth (if provided to Cryptic Studios), billing address, and the first six digits and the last four digits of credit cards registered on the site may have been accessed."

"All accounts that we believe were present in the database have had the passwords reset."

Cryptic emphasized that at this point, there is no evidence that information beyond account names, handles, and encrypted passwords have been accessed.

"We have conducted an in-depth investigation into the source and extent of the intrusion and have taken immediate action as a result, including resetting the passwords of the affected accounts and notifying those customers via email," a Cryptic Studios spokesperson said.

"We sincerely regret that this invasion has occurred. Our customers' privacy is our top priority and we are continuously increasing security measures to protect their information."

The studio urges customers to change their passwords and be vigilant about email and postal scams.

It is unclear what impact the resetting of passwords will have two years after the database compromise. It is currently unknown whether the intruder has already used any of the accessed user information for harm.

Cryptic Studios is continuing its investigation. We've reached out for comment and will update this story when we hear back.

More from Polygon

Enemy Starfighter: Homeworld from inside a fighter

  • Call of Duty: Advanced Warfare gameplay trailer

  • Diablo 3 - Xbox One vs. PC comparison

  • Hearthstone - Military Quarter gameplay video

  • Elite: Dangerous Overview video

Latest Discussions

X
Log In Sign Up

forgot?
Log In Sign Up

Please choose a new Polygon username and password

As part of the new Polygon launch, prior users will need to choose a permanent username, along with a new password.

Your username will be used to login to Polygon going forward.

I already have a Vox Media account!

Verify Vox Media account

Please login to your Vox Media account. This account will be linked to your previously existing Eater account.

Please choose a new Polygon username and password

As part of the new Polygon launch, prior MT authors will need to choose a new username and password.

Your username will be used to login to Polygon going forward.

Forgot password?

We'll email you a reset link.

If you signed up using a 3rd party account like Facebook or Twitter, please login with it instead.

Forgot password?

Try another email?

Almost done,

By becoming a registered user, you are also agreeing to our Terms and confirming that you have read our Privacy Policy.
Spinner.vc97ec6e

Authenticating

Great!

Choose an available username to complete sign up.

In order to provide our users with a better overall experience, we ask for more information from Facebook when using it to login so that we can learn more about our audience and provide you with the best possible experience. We do not store specific user data and the sharing of it is not required to login with Facebook.

tracking_pixel_5353_tracker