• Some users have recently had their accounts hijacked. It seems that the now defunct EVGA forums might have compromised your password there and seems many are using the same PW here. We would suggest you UPDATE YOUR PASSWORD and TURN ON 2FA for your account here to further secure it. None of the compromised accounts had 2FA turned on.
    Once you have enabled 2FA, your account will be updated soon to show a badge, letting other members know that you use 2FA to protect your account. This should be beneficial for everyone that uses FSFT.

Trion Worlds Hacked

jonathonball

jonathonball

[H]ard|Gawd
Joined
Sep 23, 2005
Messages
1,427
Did anyone else get the e-mail? Seems they got hacked. Does any actually play RIFT? I never made it past the free trial.

Dear Jon,
We recently discovered that unauthorized intruders gained access to a Trion Worlds account database. The database in question contained information including user names, encrypted passwords, dates of birth, email addresses, billing addresses, and the first and last four digits and expiration dates of customer credit cards.

There is no evidence, and we have no reason to believe, that full credit card information was accessed or compromised in any way. We have already taken further action to strengthen our systems, even as we, with external security experts, continue to research the extent of the unauthorized access.

You will notice on your next log in to our website that you will be required to change your password, and existing Mobile Authenticator users will also need to reconnect their Authenticator. When you log in, you will be prompted to provide a new password, security questions and answers, and be given the option to connect your account to our Mobile Authenticator to enhance your account’s security.

If you have used your username and password for other accounts, especially financial accounts or accounts with personal information, we suggest you change your passwords on those accounts as well. We recommend that you carefully review your statements, account activity, and credit reports to help protect the security of those accounts. If you need information on how to obtain your credit report or believe any such accounts have been breached, please visit www.trionworlds.com/AccountNotification for more information.

You should have continued, uninterrupted access to RIFT, and we do not anticipate any disruptions to your playing time.

Nevertheless, if you own the RIFT game, you will be granted three (3) days of complimentary RIFT game time once you update your password and security questions.

Additionally, once you update your account and set a new password, your account will be granted a Moneybags’ Purse, which increases your looted coin by 10%, even if you have not yet purchased RIFT.

Please log in to https://rift.trionworlds.com (and we recommend that you copy and paste this link into your browser to access the site) to update your password, security questions and Authenticator.

We apologize for any inconvenience this may have caused you. If you have further questions, please visit our website, www.trionworlds.com/AccountNotificationFAQ.

– The Trion Worlds Team
Click to expand...
 
I dont play RIFT any more, but I did for several months. Got the email today as well.
 
Apparently my personal information was worth some imaginary money bag and access to a game I no longer play.
 
This is a goldmine for an identity thief. Assuming they're using the standard 8 character minimum pw + 4 character salt, anyone with access to decent rainbow tables will be able to get at least hundreds of email address + password combinations with billing addresses, and with those the ability to seriously screw people over.

This is exactly why I use different generated 40 character passwords for every site.
 
I played Rift for a little while when it came out.

I started getting a lot of phishing spams trying to get me to "verify my account information" right after I signed up.

They tapered off when I stopped paying the subscription and started when I renewed (briefly) a few months ago.

I suspect they have had issues from the start.
 
A while back (4-5 months ago), I got a weird email from Trion telling me that my account was disabled due to suspicious activity. I called them to see what was going on since had only ever made a free account during beta. They assured me nothing was hacked.

Fast forward to the other day and I got that email... I bet it happened way back when and they are just finding it now.
 
Yep, I got it as well. Amusingly, it was right after enabling the android security app.
 
You must log in or register to reply here.
Back
Top