Potential User Data Breach

"

iLumineux wrote:

It all makes sense now, a few days ago I had a notice from PayPal that I had an unauthorized login and I quickly changed my password, but I always wondered what might have been the cause. Thank you GGG for notifying the player base. It's really reassuring to know that we as consumers and players have this transparency with you as a company.

"

bwam wrote:

"

hunter_AS wrote:

^ This does not inspire a lot of confidence. If you severed internet connections and started immediately reformatting without performing imaging on the affected systems, it shows that you clearly do not have capable incident responders on staff. With that being known, I sincerely doubt the security measures you put in place are adequate, unless you have identified root cause, which is once again hard to do when you immediately start erasing evidence. Along with this, if there was potential proof that sensitive information was accessed, you are wiping this out as well.

With that said, as long as the payment card data never touches your network and you actually are salting, very little issue aside from your proprietary information potentially being breached. I appreciate the notice, but your response didn't inspire much enthusiasm for your ability to handle the event.

I know the common though is blah blah blah who does this guy think he is, I am a former PCI Forensic Investigator consultant who has led with major credit card breaches and now lead the incident management department at a large financial institution. Before this I served as a lead penetration tester as well.

Man joins PoE over a year ago, leaves forums untouched. Man's first post? This one. I'd be inclined to pay attn to what he said.