Gaming hardware vendor Razer has accidentally exposed the personal information of over one lakh gamers that was available for nearly a month for hackers to exploit.

Security researcher Volodymyr Diachenko first discovered that customer data on Razer`s website was made publicly available on August 18 because of a server misconfiguration.

Leaked data included full name, email, phone number, customer internal ID, order number, order details, billing, and shipping address.

After discovering the misconfiguration online, Diachenko reached out to Razer several times over the span of three weeks before receiving a reply.

“My message never reached the right people inside the company and was processed by non-technical support managers for more than three weeks until the instance was secured from public access,” Diachenko said in a post on LinkedIn.

“We were made aware by Volodymyr of a server misconfiguration that potentially exposed order details, customer, and shipping information. No other sensitive data such as credit card numbers or passwords were exposed,” the company said.

“The server misconfiguration has been fixed on September 9, prior to the lapse being made public,” the company added.

However, according to Diachenko, the customer records could be used by criminals to launch targeted phishing attacks wherein the scammer poses as Razer or a related company.

“Customers should be on the lookout for phishing attempts sent to their phone or email address. Malicious emails or messages might encourage victims to click on links to fake login pages or download malware onto their device”.

Razer customers could be at risk of fraud and targeted phishing attacks perpetrated by criminals who might have accessed the data, the security researcher warned.

Source: https://www.dnaindia.com/technology/report-personal-information-of-over-1-lakh-gamers-accidentally-leaked-by-razer-2843074

Razer Inc., Data breach, Information

World news – CA – Personal information of over 1 lakh gamers ‘accidentally’ leaked by Razer

En s’appuyant sur ses expertises dans les domaines du digital, des technologies et des process , CSS Engineering vous accompagne dans vos chantiers de transformation les plus ambitieux et vous aide à faire émerger de nouvelles idées, de nouvelles offres, de nouveaux modes de collaboration, de nouvelles manières de produire et de vendre.

CSS Engineering s’implique dans les projets de chaque client comme si c’était les siens. Nous croyons qu’une société de conseil devrait être plus que d’un conseiller. Nous nous mettons à la place de nos clients, pour aligner nos incitations à leurs objectifs, et collaborer pour débloquer le plein potentiel de leur entreprise. Cela établit des relations profondes et agréables.

Nos services:

  1. Création des sites web professionnels
  2. Hébergement web haute performance et illimité
  3. Vente et installation des caméras de vidéo surveillance
  4. Vente et installation des système de sécurité et d’alarme
  5. E-Marketing

Toutes nos réalisations ici https://www.css-engineering.com/en/works/

LEAVE A REPLY

Please enter your comment!
Please enter your name here