It seems that you're using an outdated browser. Some things may not work as they should (or don't work at all).
We suggest you upgrade newer and better browser like: Chrome, Firefox, Internet Explorer or Opera

×
I got this email today :
Important information regarding your account



Dear valued Codemasters customer,

On Friday 3rd June, unauthorised entry was gained to our Codemasters.com website. As soon as the intrusion was detected, we immediately took codemasters.com and associated web services offline in order to prevent any further intrusion.

During the days since the attack we have conducted a thorough investigation in order to ascertain the extent and scope of the breach and have regrettably discovered that the intruder was able to gain access to the following:

Codemasters.com website

Access to the Codemasters corporate website and sub-domains.

DiRT 3 VIP code redemption page

Access to the DiRT 3 VIP code redemption page.

The Codemasters EStore

We believe the following have been compromised: Customer names and addresses, email addresses, telephone numbers, encrypted passwords and order history. Please note that no personal payment information was stored with Codemasters as we use external payment providers, meaning your payment details were not at risk from this intrusion.

Codemasters CodeM database

Members' names, usernames, screen names, email addresses, date of birth, encrypted passwords, newsletter preferences, any biographies entered by users, details of last site activity, IP addresses and Xbox Live Gamertags are all believed to have been compromised.

Whilst we do not have confirmation that any of this data was actually downloaded onto an external device, we have to assume that, as access was gained, all of these details were compromised and/or stolen.

The Codemasters.com website will remain offline for the foreseeable future with all Codemasters.com traffic re-directed to the Codemasters Facebook page instead. A new website will launch later in the year.

Advice

For your security, in the first instance we advise you to change any passwords you have associated with other Codemasters accounts. If you use the same login information for other sites, you should change that information too. Furthermore, be extra cautious of potential scams, via email, phone, or post that ask you for personal or sensitive information. Please note that Codemasters will never ask you for any payment data such as credit card numbers or bank account details, nor will Codemasters ask you for passwords or other personal identifying data. Be aware too of fraudulent emails that may outwardly appear to be from Codemasters with links inviting you to visit websites. The safest way to visit your favourite websites is always by typing in the address manually into the address bar of your browser.

Unfortunately, Codemasters is the latest victim in on-going targeted attacks against numerous game companies. We assure you that we are doing everything within our legal means to track down the perpetrators and take action to the full extent of the law.

We apologise for this incident and regret any inconvenience caused.

We are contacting all customers who may have been affected directly.

Should you have any concerns or wish to speak to a member of our Customer Services team, please email them at custservice@codemasters.com.
I am curious what the legal repurcussions of this recent wave of attacks will be. I am certain that the internet security industry will get a boost as demand sky rockets. Spain just arrested 3 members of Anon, I believe.
I'm just glad to see Codemasters actually send out an information mail like this specifying exactly what they could've gotten hold of. And that unlike some of Sony's compromised sites, the passwords were at least encrypted. Should if nothing else cause a slight delay in which customers can try to change passwords if they've used trhe same other places and are a bit paranoid
Nice of them to send that out. Unless their security was incompetent it isn't really their fault.

I don't think I have a codemasters account.
That's a pisser, as I'm an ex-LOTRO subscriber I'm pretty sure I'll be in there somewhere.

Luckily I gave them the bare minimum information possible, I change my passwords every few months, and I've moved house since that information was current. It's still not nice, though.

These widespread hacks are becoming a bit worrysome. I understand and almost agree with stuff like the Sony one, as that was genuinely motivated by Sony's own asshattery, but Codemasters aren't particularly high on the Evil Game Publishers ranking.

On the plus side, hopefully this has got all of these corporations finally crapping themselves into locking their doors properly, and hopefully they'll start keeping a more respectful hold on our data.
well fuck!

I haven't played a Codemasters game since RF online, but my shit could very well be in there too.

I'm not worried about the credit card info 'cause the card I used for that game is dead and gone, but I did use the same Account name and password for other MMOs that do have current card info.

... well shit, now I gotta think up a new password 'cause none of the mmo sites let you change your login.
Wtf ?
Our Epic Games web sites and forums were recently hacked. After some downtime, they're back up and running now.

The hackers may have obtained the email addresses and encrypted passwords of forum users. Plaintext passwords weren't revealed, but it's possible that those passwords could be obtained by a brute-force attack on the encrypted passwords. Therefore, we have reset all passwords. Your new password at the bottom of this message.

The Unreal Developer Network (UDN) hasn't been compromised. Thankfully, none of our web sites ask for, or store, credit card information or other financial data.

We're sorry for the inconvenience, and appreciate everyone's patience as we wrestle our servers back under control.

Tim Sweeney
Founder, Epic Games Inc
Jesus...this shit is getting a little ridiculous.
avatar
StonerMk2: Jesus...this shit is getting a little ridiculous.
Just a bit.

On a related note, not even I can remember my Codemasters Code M password, maybe these hackers could find my account, because I can't!
I just asked them to delete my account because I can't even access their site at the moment. I can't even remember when I last used it or what I used it for.
avatar
DrakeFox: I'm just glad to see Codemasters actually send out an information mail like this specifying exactly what they could've gotten hold of. And that unlike some of Sony's compromised sites, the passwords were at least encrypted. Should if nothing else cause a slight delay in which customers can try to change passwords if they've used trhe same other places and are a bit paranoid
UK law, specifically the Data Protection Act 1998, forces them to inform affected people.

I'd like to think being a British company, they'd have done it anyway, especially a company as old as CM. I used to play their games on my 8-bit ZX Spectrum ^_^

avatar
Navagon: I just asked them to delete my account because I can't even access their site at the moment. I can't even remember when I last used it or what I used it for.
They took it down, and have no idea when it's going back up. To safeguard against further intrusions until then can determine the method of the breach...
avatar
Lone3wolf: They took it down, and have no idea when it's going back up. To safeguard against further intrusions until then can determine the method of the breach...
Yeah I figured that was probably the case. But all the same I don't see any reason for me to keep that account. If I need another one in future I'll just recreate it.
Makes you realise just how spread around our personal data is these days. All these companies with massive databases with all our details on them, you just don't realise how many of them have it until they get attacked...
avatar
FlintlockJazz: Makes you realise just how spread around our personal data is these days. All these companies with massive databases with all our details on them, you just don't realise how many of them have it until they get attacked...
Heh. I'm waiting for Failbook to get attacked....all those hundreds of millions of idiots calmly letting Failbook decide what privacy they're to have (ie none at all, as default on ANY change/upgrade) will make it really easy for hackers.
I've got everything I can locked down to family, and old school friends. New people for games, work and the like get put into "lists" and the info they can access is limited to what they need for that game or whatever.
Probably not totally secure, but better than most have "Share everything to everyone" >.<
Fuck YOU, Zuckerfail! No ads revenues off of me! :\
avatar
FlintlockJazz: Makes you realise just how spread around our personal data is these days. All these companies with massive databases with all our details on them, you just don't realise how many of them have it until they get attacked...
I just give fake info to most forum sites to avoid this sort of crap happening. The little they know about me the better.