Videogamesplus.ca hacked?

Cthulhu8u

CAGiversary!
Feedback
2 (100%)
I just saw this on Joystiq

http://www.joystiq.com/2012/01/18/videogamesplus-ca-investigating-security-issue-recommends-pas/

Earlier today it was reported that VideoGamesPlus.ca had been hacked and 21,000 customers' account details were posted for all to see. Eurogamer obtained an email from the company to customers saying the site is "currently investigating a security issue" and is recommending folks to change their passwords.

I know at least a few Canadians shop there, possibly online, so head's up if you didn't know.
 
Yeah, the passwords were protected with md5 so they're easily retrievable. A lot of Euros use the site for importing, so they're probably effected as well.

Either way, change your passwords everywhere if you used the same password there as you do on your other sites.
 
I read about this days ago on vg247...should have posted it (duh).
VGP has said nothing and has ignored the issues. I couldn't cancel my account so I just changed all my personal info to crap.

They informed no one of this which sickens me because it gave the thieves more time to spread the data around. I visited a few places where they were sharing the info and using it to hack other online stores. Didn't see my info but VGP doesn't have my current info and I use different passwords for everything.

VGP will never get my business again.
 
motherf@#$@%

I just grabbed the info file. I'm in there. My new email too which I do not remember using.
great...off to change all my online accounts.
 
Maybe you guys didn't see the e-mails in your spam folders; I received four e-mails from them alerting me of a possible security breach and a recommendation to change my password, but they all ended up in my spam folder for some reason.

Not that that makes this any better, of course. I'm certainly not impressed at my personal info being leaked.
 
[quote name='Derfel']Maybe you guys didn't see the e-mails in your spam folders; I received four e-mails from them alerting me of a possible security breach and a recommendation to change my password, but they all ended up in my spam folder for some reason.

Not that that makes this any better, of course. I'm certainly not impressed at my personal info being leaked.[/QUOTE]

Like some others I didn't get an e-mail. Nothing in my spam folder. VGP newsletters always show up in my mailbox anyway, but there was nothing from them about this to me.
 
Damn, better change my password. Does anyone know how to change your password on there? Everytime I change my password on Edit Account, it doesn't save.
 
Last edited by a moderator:
I have received e-mails from VGP, and there are posts on their Facebook page and Twitter.

They've definitely acknowledged the problem.
 
[quote name='OmegaChaos']Damn, better change my password. Does anyone know how to change your password on there? Everytime I change my password on Edit Account, it doesn't save.[/QUOTE]

I'm having the same problem. It doesn't matter what account information I change, it will not save.
 
[quote name='OmegaChaos']Damn, better change my password. Does anyone know how to change your password on there? Everytime I change my password on Edit Account, it doesn't save.[/QUOTE]


I had the same problem so I ended up using the password forgotten option for now and emailed them about the issue.
 
Yeah, I ended up using the "Forgotten Password" option for now. I guess since you emailed them about the issue, it will get fixed soon.
 
[quote name='Robotron2084']motherf@#$@%

I just grabbed the info file. I'm in there. My new email too which I do not remember using.
great...off to change all my online accounts.[/QUOTE]

Hey, I never thought to look at that. ... Yep, I'm on it too. Good thing I went and changed my passwords already. Pretty annoying as I mostly use the same password for smaller retail sites.
 
I'm too scared to look at the list (well, maybe scared isn't the right word. It would make me feel so uneasy to see all my info publicly exposed), I'm just assuming I'm on it. I never really thought a site I went to would get hacked, but now I'm not taking any chances, so I've started to use LastPass.

I haven't received an email or anything from VGP yet....I would have never known about this if it weren't for this thread. :/
 
I'm sorry to hear that Everyone :( tho your info was taken i hope nothing bad happens after this to anyone with Identity or CC usage.
 
They SAY that no credit card information was stored in the same manner this information was stored... According to their blog. But do I trust them? Not a chance, I'm one of the numerous on here who did not receive an email notifying me about this major security breach.

I check my email numerous times daily (junk folder included) and nothing, I always get their advertisements in my inbox - so why wouldn't I get this email?

In either matter, atleast you can dispute fraudulent credit card claims if your CC info was compromised.

I had a fake date of birth listed for mine, I would suggest this for anyone else anytime they sign up for any site/service.

Good luck to all, hope no one has to deal with anything bad from this issue.
 
[quote name='Stanger31']They SAY that no credit card information was stored in the same manner this information was stored... According to their blog. But do I trust them? Not a chance, I'm one of the numerous on here who did not receive an email notifying me about this major security breach.[/QUOTE]

You can find the file with all the information online; it doesn't have any credit card info listed. It's name, birthdate, e-mail, phone number, hashed password.

I imagine this information was probably already leaked for those who have PSN accounts when that hack occurred (myself included), but it's somehow extra-alarming to see the results of these hacks yourself...
 
The only time I've ever used VGP, was when I bought Valkyria Chronicles for 20$. Also, good thing I don't use the same passwords on the sites I go on.
 
[quote name='OmegaChaos']The only time I've ever used VGP, was when I bought Valkyria Chronicles for 20$. Also, good thing I don't use the same passwords on the sites I go on.[/QUOTE]

I never could understand why people did that. Lazy as I am, I never considered doing it as its just like asking to be screwed over the second it ends up in the wild, so to speak.
 
Thanks jeffx for confirming that I was in the file... I too never got an email from them, and check my junk folder before emptying it. I also have them on my approved senders since I have ordered from them and get their newsletters. I only re-used that password at a couple non-ordering sites, but still annoying all the same.
 
I use a different password for every place I go, but generally the same e-mail for my online purchasing. If my e-mail ends up on a "hacked" list (or possible hack...hello Sony) then I dump that e-mail and create a new one.

I recommend a PasswordCard for passwords. It's a great idea and it makes it easier since you can have many different passwords attached to one card and it avoids standard words that are easier to hack.
http://www.passwordcard.org/en
 
Arrg.... I just signed up on Thursday. I also didn't find out about the hacking until visiting CAG. I would have not made a purchase otherwise. Or perhaps I should've done more research! I had looked at the site plenty of times before and it seemed ok... I'm trying to change my info but it's not saving either. Oh, if I wasn't such a cheap ass gamer, I would have just bought my games from Amazon or somewhere for more money! Well, I would've canceled my order but they say my items have shipped :/
 
[quote name='ZubZub']Oh, if I wasn't such a cheap ass gamer, I would have just bought my games from Amazon or somewhere for more money![/QUOTE]

Ok... even though I've found most products on VGP to be overpriced, but whatever...
 
[quote name='dotCody']Ok... even though I've found most products on VGP to be overpriced, but whatever...[/QUOTE]

The "deal" I got was Ghost Trick DS for $20 and the other game was about average priced. So yeah, no huge savings on their site or anything, but I was happy to find the DS game at that price.
 
They got me to buy only once a few Boxing Days ago... Got COD-Modern Warfare 2 with the night vision goggles (Prestige Pack) for like $60 or less and a few other cheap games.

But I'll agree, since then, I haven't seen anything worth buying.
 
I got a reply back to my email and was able to edit my account and password. Seems like they fixed the problem, I was able to log off and on my account without it changing back.
 
bread's done
Back
Top