SEGA Pass Database Compromised, Payment Info NOT Affected

SEGA sent emails out this morning notifying customers that it had identified unauthorized entry into its SEGA Pass database. The database, containing account information for SEGA Pass members, is said to have been compromised and the service was subsequently brought offline to protect from further intrusion and allow for investigation of the breach. Information that may have been obtained by the intruders includes email addresses, dates of birth, and encrypted passwords of SEGA pass members. SEGA emphasized in their email to consumers that no personal payment information was compromised, as an external payment provider is used to handle and store these details. Here is the full email sent to SEGA Pass members:

"Dear _______,

As you may be aware, the SEGA Pass system has been offline since yesterday, Thursday 16 June.

Over the last 24 hours we have identified that unauthorised entry was gained to our SEGA Pass database.

We immediately took the appropriate action to protect our consumers’ data and isolate the location of the breach. We have launched an investigation into the extent of the breach of our public systems.

We have identified that a subset of SEGA Pass members emails addresses, dates of birth and encrypted passwords were obtained. To stress, none of the passwords obtained were stored in plain text.

Please note that no personal payment information was stored by SEGA as we use external payment providers, meaning your payment details were not at risk from this intrusion.

If you use the same login information for other websites and/or services as you do for SEGA Pass, you should change that information immediately.

We have also reset your password and all access to SEGA Pass has been temporarily suspended.

Additionally we recommend you please take extra caution if you should receive suspicious emails that ask for personal or sensitive information.

Therefore please do not attempt to login to SEGA Pass at present, we will communicate when the service becomes available.

We sincerely apologise for this incident and regret any inconvenience caused.

We are contacting all our members with these recommendations.

If you have any further questions please contact SEGA customer support on [email protected]"

Sega now joins companies like Sony and Codemasters in the list of those targeted by recent security breaches. Feel free to drop by the forums to join in on the ongoing discussions regarding this latest incident, or to place your bets on who's next!