Recently, the gamepad company, SCUF, has experienced a security breach that has exposed the online information of millions of people spread across the internet. The database exposed in the data breach includes the detailed information of people who have purchased the gamepad manufactured by the company, including their names, payment made, and contact. Founded in the year 2010 with the name of SCUF Gaming International, the company has earned a name for itself in manufacturing high-end gaming controllers for several gaming consoles including PS4, Xbox and PCs. The company has been owned by a computer hardware company based in America, Corsair components, which has specialization in manufacturing computer accessories such as headsets, flash drives, wireless devices, and keyboards.
The incident of the data breach was identified by one of the security researchers of Comparitech, Bob Diachenko. He found and reported that a database exposing the detailed information of the customers is easily accessible on the servers of SCUF Gaming International without any password or authentication. The company instantly sealed the unauthorized access to the data after getting informed about the whole mishap. The company stumbled when it got a note left by the cyber thieves during the investigation of the entire issue. The ransom note left by the cyber thieves contained a threatening message demanding 0.3 BTC to the BitCoin Address send by them by contacting through the emails.
Meanwhile, the company took quick steps to console the people regarding the data breach. It said in a notification posted on its site that it is limited to only one specific system. The company said that the customers need not worry about the data breach as access to the online data is closed. Amidst all, it seems that the database includes information related to both employees and the customers spanning the last three years. It consists of the full names with the email address of the people along with their billing and shipping address. Also, the database has information about the phone numbers of the customers with an order history of almost 1,228,649 consumers. Apart from these, the detailed information regarding the payments, expiration of date of credit cards, amount of orders made, and transaction ids of almost 991478 consumers have also been spread on the site with easy access. The figure of a data breach is not limited here as it has also included the user names and session ids of at least 754 employees of SCUF Gaming along with order details of almost 144,479 consumers related to repairing the things. The data breach also includes the API keys, which numbers are still undisclosed. The company has started a quick audit-related with security issues to make its databases and devices safe along with informing the parties which are affected by this data breach.
The Risk Involved in this Data Breach
The company has assured its customers that there is no risk or threat to them even if the credit card numbers or other information has been exposed. The company has told its customers that exposing their user ids or payment details would not create any threat to the people. But, it can’t be denied that such information can be utilized in the wrong way by the cybercriminals. Cybercriminals can use such details to make you the victim. The cyber-thieves contact you through your email ids, or phone numbers can get other financial or personal information from you. Further, the data obtained from you could be used by the cyber thieves for committing online thefts. It is common for online stores such as Amazon and SCUF Gaming to keep data of their customers for several reasons. However, there is nothing wrong with this, and access to someone’s credit card numbers and another information can’t’ pose a threat immediately. But, still, there is nothing wrong if you take some extra precautions and keep your online data more secure.
Emily Johnson is a creative person who has been writing blogs and articles about cybersecurity. She writes about the latest updates regarding office.com/setup and how it can improve the work experience of users. Her articles have been published in many popular e-magazines, blogs, and websites.
No comments:
Post a Comment