Second Major Data Breach To Hit Gaming Community In Recent Weeks

The Guardian, May 13, 2011

Hackers have broken into the vaults of the Japanese video games developer, Square Enix, accessing the details of 25,000 customers in the second major data breach to hit the gaming world in recent weeks.

The software house, which is behind some of the world’s most successful computer game franchises, including Final Fantasy, Deus Ex and the Tomb Raider series, said the intruders could have stolen customer email addresses after cracking security on two of its websites.

It said no credit card details were exposed, but admitted the CVs of 350 people applying for jobs in its Canadian offices could also have been downloaded.

“Square Enix can confirm a group of hackers gained access to parts of our Eidosmontreal.com website as well as two of our product sites,” the company said in a statement.

“We immediately took the sites offline to assess how this had happened and what had been accessed, then took further measures to increase the security of these and all of our websites, before allowing the sites to go live again.”

Square Enix’s admission follows last month’s revelation that an attack on Sony’s gaming networks caused the loss of personal data held in tens of millions of online accounts.

Sony has apologized for the security failures that saw hackers break into its Playstation Network and Sony Online Entertainment networks, accessing the credit card accounts of more than 100 million customers.

The haul of data stolen in the Sony attacks, believed to be the biggest security breach in the history of the internet, could cost in excess of 1bn.

Square Enix stressed that information stolen from its servers was limited to contact details. “These email addresses are not linked to any additional personal information,” it said. “They were site registration email addresses provided to us for users to receive product information updates.”

For more information on this article, Q/ISP, ISM Lead Auditor, & online security training visit Security University.