Blizzard Entertainment, the makers of the popular games World of Warcraft and Diablo, announced on Thursday that their company was the victim of a network security breach. The company believes that no “sensitive financial information” had been comprised but, email addresses and scrambled passwords from Battle.net players had been stolen.
Blizzard Entertainment President Michael Morhaime took to the company’s blog to post the following statement – “This week, our security team found an unauthorized and illegal access into our internal network here at Blizzard. We quickly took steps to close off this access and began working with law enforcement and security experts to investigate what happened.
At this time, we’ve found no evidence that financial information such as credit cards, billing addresses, or real names were compromised. Our investigation is ongoing, but so far nothing suggests that these pieces of information have been accessed.”
In addition to emails and passwords, customers in the United States, Australia, New Zealand, and Latin American may also have had their personal security questions and their mobile and dial-in authentication stolen as well. The company tried to reassure their customers saying that their cryptography techniques will make it hard for hackers to figure out the passwords and access players’ accounts. But, the Morhaime is asking customers to go ahead and change their password
“Based on what we currently know, this information alone is NOT enough for anyone to gain access to Battle.net accounts. However, the company is nevertheless recommending that users change their passwords immediately.”
“We also know that cryptographically scrambled versions of Battle.net passwords (not actual passwords) for players on North American servers were taken. We use Secure Remote Password protocol (SRP) to protect these passwords, which is designed to make it extremely difficult to extract the actual password, and also means that each password would have to be deciphered individually. As a precaution, however, we recommend that players on North American servers change their password,” Morhaime stated in the blog.
This security breach is just the latest in high profile companies being targeted by hackers. Just last month, it was announced that over 450,000 login credentials were stolen from Yahoo. And in early summer, almost 8 million passwords from LinkedIn, eHarmony and Last.fm were posted onto hacker sites.