Originally posted by Trion Worlds
We recently discovered that unauthorized intruders gained access to a Trion Worlds account database. The database in question contained information including user names, encrypted passwords, dates of birth, email addresses, billing addresses, and the first and last four digits and expiration dates of customer credit cards.

There is no evidence, and we have no reason to believe, that full credit card information was accessed or compromised in any way. We have already taken further action to strengthen our systems, even as we, with external security experts, continue to research the extent of the unauthorized access.

Anyone get the email? It's about time these MMO's should stop storing our personal details.

This is confirmed by Trion

http://www.trionworlds.com/en/games/account-notification?__utma=1.974972898.1324607305.1324607305.1324607305.1&__utmb=1.40.10.1324607305&__utmc=1&__utmx=-&__utmz=1.1324607305.1.1.utmcsr=%28direct%29|utmccn=%28direct%29|utmcmd=%28none%29&__utmv=-&__utmk=25760957

yeah i got the email too.

I wonder if that database had information from inactive accounts.

Amazing -- I did NOT get such an email.  Maybe they actually purge their database in a timely manner of people who are no longer subscribed...  If so then kudos to trion for actually doing something right that a lot of places do not do.

Either that or they get the data but simply do not notify people who are not currently subscribed -- that would be less good of course.

Oh, and not having the whole credit card number in one place is a very good thing. 

oopsie.

Yea,  no such email for me either.  I was there for launch and not much after.

I like how they lost your name, address, DOB, email, AND passwords... no worries, we didn't lose credit cards... we don't think.

Nah you just lost everything but my social and more than enough to steal my identity.

quite honestly they did the best thing they couldve done when they found out, they made it public unlike soe who waited what? 2+ weeks?

Also we do not know how strong said encryption is/was but if it is any decent encryption the info wont get out whitout the key to deencrypt it.

the email also includes this:

"Nevertheless, if you own the RIFT game, you will be granted three (3) days of complimentary RIFT game time once you update your password and security questions. 

Additionally, once you update your account and set a new password, your account will be granted a Moneybags’ Purse, which increases your looted coin by 10%, even if you have not yet purchased RIFT. "

Still not enough to get me to give up my lightsaber!

Originally posted by Ikeda

Yea,  no such email for me either.  I was there for launch and not much after.

I like how they lost your name, address, DOB, email, AND passwords... no worries, we didn't lose credit cards... we don't think.

Nah you just lost everything but my social and more than enough to steal my identity.

Risk you take honestly...Blizzard and Bioware are the only ones not hit so far. maybe ccp?

Blech -- so much for giving them kudos -- I just got the message.

Now the reverse of what I said earlier -- I quit the game several months ago.  WHY is my CC data and all that other data still accessable to hackers and not archived somewhere?

I mean the main problem is NOT passwords to other similar accounts with regard to email address, but people using your date of birth, name, and email to try to grab your data via password recoveries.

The secondary security is usually far worse than the password itself.

This is hitting them at a bad time. Many will overreact and say "damn Trion, i knew i should have gone swtor!"

The 3 days compensation is also a joke for everyone with an active sub. If someone is an active player, his account is up anyway. If he quit the game, he probably has no interest in another 3 days or any use for them.

i got email and i haven't been subscribed for about 8 months.

Ouch.

Sad news this.

So.......they gave me 30 days of game time free due to the ascend a friend playing the game for more than 30 days

then this?

Did they just reactive my account right before the hacking D;

Originally posted by Ikeda

Yea,  no such email for me either.  I was there for launch and not much after.

I like how they lost your name, address, DOB, email, AND passwords... no worries, we didn't lose credit cards... we don't think.

Nah you just lost everything but my social and more than enough to steal my identity.

Information thats probably extremely easy to obtain, other than the password which should be unique to Rift anyway.  

This is one of the many reasons I do not play Rift anymore.  Their security system was beyond constrictive and asinine before.  Yet, they still can't keep people from hacking their site.  On top of it, when I went through their suggested process to reset my password, it didn't work at all.  It just looped me back to their message of security issues and that I needed to reset my password.

So, I'm in the process of getting my account totally closed due to this completely failed security system.

EDIT:  Nevermind... it worked for me the second time.  I'm still going to get my account totally closed though.

So some people noticed that their google e-mail was attempted to be logged into. This is sad because it is pointing that the breach happened from Russia which very recently introduced Rift servers.

WHOIS - 92.240.208.115

Location: Russian Federation (high) [City: ]

ARIN says that this IP belongs to RIPE; I'm looking it up there.

% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Information related to '92.240.192.0 - 92.240.223.255'

inetnum:        92.240.192.0 - 92.240.223.255
netname:        RU-TELECC-20071126
descr:          "Telecom Management" Company Limited
country:        RU
org:            ORG-TCSL2-RIPE
admin-c:        VK1203-RIPE
tech-c:         VK1203-RIPE
status:         ALLOCATED PA
notify:         ************@telecom-m.com
mnt-by:         RIPE-NCC-HM-MNT
mnt-lower:      MNT-TMPERM
mnt-routes:     MNT-TMPERM
changed:        **********@ripe.net 20071126
source:         RIPE

organisation:    ORG-TCSL2-RIPE
org-name:        "Telecom Management" Company Limited
org-type:        LIR
address:         Telecom Management Company Limited
address:         Olga Rybakina
address:         Malkova, 12
address:         614087 PERM
address:         RUSSIAN FEDERATION
phone:           +73422000260
fax-no:          +73422000261
mnt-ref:         RIPE-NCC-HM-MNT
mnt-ref:         MNT-TMPERM
mnt-by:          RIPE-NCC-HM-MNT
changed:         *******@ripe.net 20060222
changed:         *********@ripe.net 20060222
changed:         *********@ripe.net 20060222
changed:         *********@ripe.net 20060228
changed:         *********@ripe.net 20060228
changed:         *********@ripe.net 20060228
changed:         *********@ripe.net 20060302
changed:         *********@ripe.net 20060303
changed:         *********@ripe.net 20060303
changed:         *********@ripe.net 20060303
changed:         *********@ripe.net 20060406
changed:         *********@ripe.net 20060407
changed:         *********@ripe.net 20060414
changed:         *********@ripe.net 20060505
changed:         *********@ripe.net 20060505
changed:         *********@ripe.net 20060506
changed:         *********@ripe.net 20060720
changed:         *********@ripe.net 20060801
changed:         *********@ripe.net 20070813
changed:         *********@ripe.net 20080220
changed:         *********@ripe.net 20080220
changed:         *********@ripe.net 20091228
changed:         *********@ripe.net 20091228
changed:         *********@ripe.net 20111208
admin-c:         AEA-RIPE
e-mail:          ********@telecom-m.com
source:          RIPE

person:         Vyacheslav Kudryashov
address:        Malkova, 12
address:        614000
address:        PERM
address:        Russian Federation
phone:          +73422505190
mnt-by:         MNT-TMPERM
nic-hdl:        VK1203-RIPE
changed:        ************@telecom-m.com 20060731
source:         RIPE

% Information related to '92.240.208.0/23AS39735'

route:          92.240.208.0/23
descr:          JSC  "National multiservice networks", Tumen
origin:         AS39735
mnt-by:         MNT-TMPERM
changed:        *********@nm-s.ru 20110114
source:         RIPE

% Information related to '92.240.208.0/24AS39735'

route:          92.240.208.0/24
descr:          JSC  "National multiservice networks", Tumen
origin:         AS39735
mnt-by:         MNT-TMPERM
changed:        *********@nm-s.ru 20110114
source:         RIPE

They have been mass-locking threads now, with the hint to keep the discussion in a single topic. From a moderation standpoint, that's most of the time an understandable reason. In this case though, it is but practically impossible to discuss a major topic raising so many different questions, concerns and opinions in a single thread.

Rather looks like they want to cut their losses in this case and not have the forum giving a negative impression in this already very critical time.