Play Com. Security breach

Inactive

Anybody else received an email from Play Com stating that their security has been breached?:eek:

It looks genuine.:mad:

Empty_pockets

Seen the same thread on another forum I visit.

aerostar

They denied it originally !!!!, but many people use unique e-mail addresses to identify the company used, eg play @ youremail address, I do.

There have been e-mails sent to people regarding Acrobat X purportedly from Adobe Canada, I received one to my play . com e-mail address so I know that is where the info came from. Alot of others have received the same.

Here is the play . com e-mail being sent to customers regarding the breach

Originally Posted by Play.com
Dear Customer,
Email Security Message

We are emailing all our customers to let you know that a company that handles part of our marketing communications has had a security breach. Unfortunately this has meant that some customer names and email addresses may have been compromised.

We take privacy and security very seriously and ensure all sensitive customer data is protected. Please be assured this issue has occurred outside of Play.com and no other personal customer information has been involved.

Please be assured we have taken every step to ensure this doesn’t happen again and accept our apologies for any inconvenience this may have caused some of you.

Customer Advice

Please do be vigilant with your email and personal information when using the internet. At Play.com we will never ask you for information such as passwords, bank account details or credit card numbers. If you receive anything suspicious in your email, please do not click on any links and forward the email on to privacy @ play . com for us to investigate.

(I have masked the play . com e-mail address so that there is not a clickable link.)



The e-mail I believe redirects to a .ru site. If you get one just delete. To be on the safe side change you password on play .com

Enterprise_1701C

I received one as well - automatically thought it was a phishing email. Unfortunately only just started using individual email addresses so can't identify if I have had problems from their idiocy.

Savvybunny2009

I have received this email too, but I am not too worried.

I was aware that play had very poor security with numerous reports of leaked information.

In light of this, once I had placed my order and it had been shipped I removed card details, my name, dob, etc etc and my password is completely seperate from that email and any accounts relating to it.

Although I have been lucky in being vigilant but I imagine many customers have not been, and as a result had their accounts accessed and their card details used to order from play.

aliEnRIK

Jane_Blackford wrote: »

so can't identify if I have had problems from their idiocy.

You cant really call them idiots or blame them for being hacked. Hackers are capable of getting past just about anything these days if they put enough resources and time into it.

debitcardmayhem

I had one too, addressed to my Play address, I also got two DHL scams last week at my FT mail address. The beauty of using separate addresses for different sites you can spot someone "may" be compromised.

TwistedPsycho

I received this last night as well.

Checking the headers, I do think that the e-mail is genuine. I don't think Play should be critisied just yet though. They are saying that a company they bring has suffered the breach so I wonder if they have any more information than we do yet.....

nilrem_2

Does anyone know how to remove CC details from a Play account?

There does not seem to be an option to remove only update?

TwistedPsycho

If your that worried, then contact them.

If, as they say, it was a marketting company that were working for them that had the security breach; I doubt said company will have access to your CC details.

Ximian

I have received an email too and tracing the email headers, the email does look genuine:

nslookup 74.112.64.38
Canonical name: mail1274c.newsletters.play.com
Addresses:
74.112.64.38

Sensitive data should be stored in encrypted format, I wish that all companies would apply this ALL customer data including email addresses so even if the system is compromised the bad guys would have encrypted data which I hope would be encrypted to a very high standard.

"We take privacy and security very seriously and ensure all sensitive customer data is protected. Please be assured this issue has occurred outside of Play.com and no other personal customer information has been involved."

I wonder if that includes Play.com ensuring that the 3rd party company has the relevant security in place such as encrypting customer information as well as passing regular security audits.