Kickstarter hacked

[ParadShift]

A popular crowdfunding platform Kickstarted has been hacked. Hackers were able to access a database that contained usernames, email addresses, mailing addresses, phone numbers, and encrypted passwords. According to the site, no credit card information had been stolen.

Kickstarter said that they were informed of the hack Wednesday by law enforcement officials, but waited four days to alert customers until they’d “thoroughly investigated the situation.”

“We strongly recommend that you create a new password for your Kickstarter account, and other accounts where you use this password,” Yancey Strickler, Kickstarter’s CEO, said in a blog post. “We’re incredibly sorry that this happened. We set a very high bar for how we serve our community, and this incident is frustrating and upsetting.”

- See more at: http://signum-soft.com/kickstarter-hacked

Why did they wait 4 days to inform users? That is an awful lot of time for hackers to exploit the data they have.

Also, Kickstarter didn’t know it had been hacked. Law enforcement told them

 

[voyagerfan99]

To me, it's not that big a deal because no card information is stored with Kickstarter. All Kickstarter payments are made through Amazon.

 

[ParadShift]

That is true, but they should inform their users earlier. I mean, four days is enough for someone with enough computing power to decrypt passwords.