Hack at ESEA Leaks 1.5m Player Records
ESEA (E-Sports Entertainment Association) an enormously big community of video gamers around the world faced hackers' wrath during December last. The incident resulted in the compromise of the profiles of 1.5m players.
The breach came to the knowledge of ESEA on 27th December following which it informed its community three days later about a probable hack. Seven days on i.e. January 7 according to a confirmation by LeakedSource, its website just got additional database which was 1,503,707 ESEA records. These consisted of private details of ESEA users such as name, birth date, state, city, phone number, e-mail address, the last login's time, and more. Pcgamer.com posted this online dated January 10, 2017.
In its Twitter message, ESEA stated that it anticipated player information's leakage, although the association did not substantiate whether the published database was from their own computers.
During the period from ESEA's knowledge about the hack to the time of the records' exposure, those who executed the hack demanded $100K to maintain silence as well as to collaborate in rectifying the vulnerability in ESEA's system. The association declined to pay up.
ESEA explains via its website that the company is continuing to investigate, however, is sure that an enormous section of its members' information could have gotten revealed - the information including cell-phone numbers, Internet Protocols, private messages, usernames, e-mails, confidential question answers that were hashed, hashed passwords, and forum posts.
The exposed details comprised of state, city, zip code, registration date, name, birth date, phone number, username, last login, e-mail id, bcrypt hash, website URL, PSN ID, Xbox ID, and Steam ID. There is no danger of password revelation, but other details within the leaked information had the chance of getting utilized for crafting several socially engineered assaults such as phishing.
The ESEA posted its apology on the website reasoning it was their liability towards doing everything feasible for securing their users' data. The association would keep on working with its developers as well as independent security specialists for enhancing its security as also investing towards making ESEA's infrastructure strong and making it move onwards, the post added.
» SPAMfighter News - 1/13/2017