Security Breach At Blizzard HQ – Your Credit Cards Are Safe Though
Mike Morhaime from Blizzard just posted a message on the Blizzard website with some rather dire news. Their security team found an illegal access right in their HQ, and whoever was using it might have taken some rather secure information.
Even when you are in the business of fun, not every week ends up being fun. This week, our security team found an unauthorized and illegal access into our internal network here at Blizzard. We quickly took steps to close off this access and began working with law enforcement and security experts to investigate what happened.
At this time, we’ve found no evidence that financial information such as credit cards, billing addresses, or real names were compromised. Our investigation is ongoing, but so far nothing suggests that these pieces of information have been accessed.
So, at least your credit card information is safe. However, it’s always good to play it safe. Keep an eye on your statements and make sure there’s no access you don’t know about.
As for information that was accessed; Mike confirmed that contact information, such as email addresses and security questions was definitely accessed by the nefarious persons.
Some data was illegally accessed, including a list of email addresses for global Battle.net users, outside of China. For players on North American servers, the answer to the personal security question, and information relating to Mobile and Dial-In Authenticators were also accessed.
Your Battle.net accounts shouldn’t be in jeapordy, but remember: Play it safe. If you’re worried, then change your password now, just in case. You might want to change the passwords of anything else you might use that password for.
We also know that cryptographically scrambled versions of Battle.net passwords (not actual passwords) for players on North American servers were taken. We use Secure Remote Password protocol (SRP) to protect these passwords, which is designed to make it extremely difficult to extract the actual password, and also means that each password would have to be deciphered individually.
Blizzard are no strangers to being targeted by nefarious schemes like this, so rest assured that they’re already fast on the way to finding out just who is behind this and reprimanding them.