World of Tanks market system hacked, account details leaked online
If you play Wargaming.net's World of Tanks, you're going to want to change your password now. PlaySpan, the system used to conduct real money transactions in the MMO, has been hacked, with over two million account details being leaked online, including email addresses, user IDs, and encrypted passwords. Credit card information doesn't appear to have been at risk, but if you use the same password for other games or sites, we'd recommend changing it to something else. And no, not 'Password1'.
We spotted the news via PCGamesN, but you may have seen it posted elsewhere, with erroneous information that Guild Wars 2, EVE Online and Runescape players are also at risk. They've since updated stating that's not the case, but if you play any MMO, it can't hurt to change your password anyway.
PlaySpan have responded to the hack by shutting down the Marketplace and locking user accounts until they've conducted an investigation. In a statement to The Verge, the company said that "When PlaySpan detected the breach, we immediately shut down the hacker's access to our systems and took steps to protect our customers' PlaySpan accounts. We then commenced a comprehensive forensic analysis and are working with law enforcement to investigate the crime.
"We sincerely apologize for any frustration or inconvenience this incident has caused our customers. We know PlaySpan's business depends on consumer trust. Security is a top priority for us, and we are redoubling our efforts to strengthen PlaySpan's overall system security."
Update (6:30 p.m. GMT) - Wargaming America has released an official statement:
Wargaming is aware of the recent security issue with PlaySpan, which affected user accounts associated with its Marketplace store, including user name, email addresses, and encrypted passwords. This affects World of Tanks players only if they used their Marketplace accounts to purchase PlaySpan Ultimate Game Cards through uPay. Wargaming urges players to change their user information and passwords if they are identical on both PlaySpan and on Wargaming.net/WorldofTanks.
Players who do not have common user information for both are at no security risk, and in addition, no financial data was compromised in the security breach.
Everyone at Wargaming apologizes for this inconvenience.