Hackers have broken into two websites belonging to Japanese video games maker Square Enix.
The company confirmed that the e-mail addresses of up to 25,000 customers who had registered for product updates may have been stolen as a result.
Resumes of 350 people applying for jobs in its Canadian office could also have been copied from the web servers.
Square Enix, which makes the popular Final Fantasy, Deus Ex and Tomb Raider games, apologised for the breach.
In a statement, it said: “Square Enix can confirm a group of hackers gained access to parts of our Eidosmontreal.com website as well as two of our product sites.
“We immediately took the sites offline to assess how this had happened and what had been accessed, then took further measures to increase the security of these and all of our websites, before allowing the sites to go live again.”
It is understood that the websites affected were Eidosmontreal.com, run by Square Enix’s subsidiary Eidos, and Deusex.com, a promotional site for the forthcoming game, Deus Ex: Human Revolution.
Scammer’s dream
Graham Cluley, a consultant at security firm Sophos, warned that both leaks could cause problems for the individuals concerned.
“With the e-mail there is a danger that gamers could be e-mailed by someone pretending to be from the company who gets them to click on a link or run some malicious software,” he told BBC News.
“The resumes are a blueprint for identity theft. They have everything that scammers want. The only thing missing is credit card information.”
Square Enix emphasised that it does not hold customers’ credit card data on its web servers.
It also said there was no evidence that the information had been distributed.
See the original article here:
Games maker Square Enix hacked