In a statement released today on its web site, Cryptic Studios announced they have uncovered evidence of unauthorized access to their customer database that occurred back to December 2010. The company stressed that they have no evidence that credit card data was taken, but it is possible that occurred.
"The unauthorized access included user account names, handles, and encrypted passwords for those accounts," Cryptic's statement said. "Even though the passwords were encrypted, it is apparent that the intruder has been able to crack some portion of the passwords in this database. All accounts that we believe were present in the database have had the passwords reset, and customers registered to these accounts have been notified via e-mail of this incident."
Cryptic also detailed what information the intruder could have taken. "While we have no evidence that any other information was taken by the intruder, it is possible that the intruder was able to access additional account information. If they did so, the first and last name, e-mail address, date of birth (if provided to Cryptic Studios), billing address, and the first six digits and the last four digits of credit cards registered on the site may have been accessed. We have no evidence at this time that any data other than the account name, handle, and encrypted password were accessed for any user."
So the intruder would not have gotten a complete credit card number, but it's possible that information could have been used to help compromise an account. As usual, caution is advised for those who suspect they may be among the victims.
Cryptic also said in their statement that they are continuing to investigate the incident, and that they will not contact users asking for credit card information social security numbers, or other personally identifiable information.
Cryptic Studios is the developer behind City of Heroes, and more recently Champions Online and Star Trek Online. Currently they are developing Neverwinter Nights, the MMORPG based on the Forgotten Realms setting from Dungeons & Dragons. Cryptic Studios was purchased in August of 2011 by Perfect World Entertainment.