Gamepad maker “Scuf Gaming” Exposed Over 1 Million Clients and Their Payment Data

guest · Apr 10, 2020

“Scuf Gaming” Exposed Over One Million Clients and Their Payment Data
April 10, 2020
https://www.technadu.com/scuf-gaming-exposed-over-one-million-clients-payment-data/98464/

A subsidiary of Corsair that sells custom gamepads for PS4, Xbox, and PC platform called “Scuf Gaming” has left an unprotected database online. The security incident has resulted in the exposure of sensitive data belonging to customers of the company and its staff, and even of internal API keys.
Scuf Gaming was notified immediately, and they took down the database in less than 48 hours.

Still, this was long enough for automated bot crawlers to locate the unprotected database and leave a ransom note demanding 0.3 BTC. The note states that the data has already been downloaded onto the actor’s servers, but that doesn’t seem to be the case, as no wiping ever happened.
A Corsair spokesperson told Comparitech that the actors didn’t have the time to encrypt or delete the data stored in the database, so they couldn’t have managed to download them either.

The unprotected database contained customer and employee information, ranging from entries created in 2017 until today.
Click to expand...

While no full credit card details have been exposed, the data left unprotected online would be enough for fraudsters, scammers, phishing actors, etc.
Click to expand...

Comparitech: Gamepad maker SCUF Gaming exposes 1.1 million customer records on the web without a password

A customer database of more than 1.1 million records was exposed on the web by SCUF Gaming, maker of high-end gamepads and other video game peripherals. The database included customer names, contact information, payment info, order histories, and repair tickets, among other data.

Comparitech’s security research team led by Bob Diachenko uncovered the data, which was accessible on the web without a password or any other authentication. The data was exposed for about two days before we discovered it and reported the incident to SCUF.
Click to expand...

Log in or Sign up

Gamepad maker “Scuf Gaming” Exposed Over 1 Million Clients and Their Payment Data

guest Guest

Log in or Sign up

Gamepad maker “Scuf Gaming” Exposed Over 1 Million Clients and Their Payment Data

guest Guest

Useful Searches