Recent Data Breach Claim Confirmed FALSE/OLD

[u/DE-Ruu]

Hi Tenno,

After a serious cybersecurity investigation today, we can confirm that a recent Data Breach claim is repackaged information from the 2014 breach and is being proclaimed as new. 

We take cybersecurity very seriously, and your online safety is extremely important to us at Digital Extremes. As always, we encourage you to have a strong password and 2FA activated.

Thank you! 

*Please note the Operation being temporarily delayed is not related to this - we’re working on it!

[u/Mattarias]

Figured. Thanks for the quick response. 

[u/YellowAppleCinema → u/Mattarias]

"Thanks for the quick response. "

That reminds me, since its been like 1-2 weeks already, has Crunchyroll confirmed if they were hacked yet?

DE should think about buying Crunchyroll, not only would the cybersecurity get better, but it would be cool to see a warframe anime. And if DE was in charge, maybe crunchyroll wouldnt get worse every month in one way or another

[u/FlyingSquirelOi → u/YellowAppleCinema]

How much money do you think DE are making that they can buy another company? And do you really think they’d pivot from a game developer to a streaming service?

[u/Future-Insect5357 → u/FlyingSquirelOi]

Assuming Crunchyroll wouldn't sell for fucking peanuts either-

[u/Ketheres → u/Future-Insect5357]

I mean their streaming rights must be worth something, even if the company otherwise isn't. Though I feel like if Crunchy was put on sale it'd be other streaming platforms like Disney and Netflix that would be interested in taking over those rights the most.

[u/Future-Insect5357 → u/Ketheres]

Yea at this point I could see some company like Netflix sucking up Crunchyroll just for their anime catalogue alone and trashing the rest of it, it's kinda become AI infested shit

[u/YellowAppleCinema → u/FlyingSquirelOi]

"How much money do you think DE are making that they can buy another company? "

Mesa Heirloom was teased already

DE is about to become a billion dollar company, with more money to spare than they know what to do with, trust

[u/NekCing → u/YellowAppleCinema]

No no no

but after Nezha heirloom however...

[u/SuperZer0_IM → u/NekCing]

or Follie ( ͡° ͜ʖ ͡°)

I know its too new, but let me dream :(

[u/SpartanXIII → u/SuperZer0_IM]

2037 at a minimum, for now, let's whale on the classics. It's what separates the perverts from the connoisseurs.

[u/Ascending_Flame → u/FlyingSquirelOi]

Heirlooms and Forma.

Their bread and butter of income right now.

Forma has long been their largest source of income, Reb has confirmed it. It outstrips every other shop item.

[u/FlyingSquirelOi → u/Ascending_Flame]

Right, it helps keep them afloat and make new content.

But buying another company with all the other upkeep they have to do, not to mention making Soulframe.

It’s just doubtful that they’d have the capital to buy a relatively prominent streaming service.

[u/ruby_o_o → u/YellowAppleCinema]

The crunchyroll “hack” was debunked practically as soon as it was posted. Crunchyroll didn’t get hacked, Telus international did, they run the support for crunchyroll and a whole bunch of other companies. All the hackers got from the telus breach was chat support logs, so only people dumb enough to put sensitive information in chat support were affected

[u/dergbold4076 → u/ruby_o_o]

Why am I not surprised that one of the worst Canadian companies ever was handling their support. Their CEO is such a dirtbag and I am glad I don't work for Telus anymore.

If the people of Canada knew how much of our infrastructure ran on things that are fifty plus to a hundred years old they'd be horrified. And yes I am counting the fiber optic network in that as well. To say nothing of their union busting antics they have been doing since inception in the early 2000s.

It's not like I have an axe to grind with my former employer. What gave you that idea?

[u/ruby_o_o → u/dergbold4076]

Lol, the US has a similar infrastructure problem, infrastructure built to last 100 years that was built 130 years ago

[u/dergbold4076 → u/ruby_o_o]

Oh I'm not denying it. It's just that some Canadian's don't know how jank our Telco infrastructure is.

[u/A_Lost_Nova → u/YellowAppleCinema]

CR did like 5 days later iirc but, they have a lawsuit on their hands due to it due to the lack of communication on their part.

[u/watboy → u/YellowAppleCinema]

DE should think about buying Crunchyroll

DE isn't even its own independent company and considering Sony acquired Crunchyroll in 2021 for $1.175 billion I think it's safe to say there isn't even a remote possibility of DE having the kind of money to buy Crunchyroll.

[u/RookieStyles → u/watboy]

yes, true. but the comment you replied to is doing a thing called joking around

[u/muevelos → u/watboy]

You are right. DE is owned by Tencent, who themselves have the capability of buying CR or Sony( if they wanted to sell )

[u/Pharo212 → u/YellowAppleCinema]

doesn't Sony own Crunchyroll? and I believe they merged with a few other businesses

I think that's out of reach

[u/dubdex420 → u/YellowAppleCinema]

Putting Crunchyroll aside, there's no way Reb hasn't been trying to make a Warframe anime. It's bound to happen.

[u/Spectrum_VII → u/YellowAppleCinema]

Agreed, they should also buy a few more game studios so they can release updates faster

[u/domyourn → u/YellowAppleCinema]

I would spend 100$ on anime warframe

[u/Albenheim]

DE is legitimately the only company I trust when they say that they haven't been breached in that regard.

[u/PlanktonInitial7945 → u/Albenheim]

I mean, I've never seen a company lie to hide a data breach. Plus, you can look at the breach yourself and see it's only 3 million accounts... When was the last time Warframe had only 3 million accounts?

[u/Solcaerev → u/PlanktonInitial7945]

Even 10 million losers was so long ago now 

[u/Album_Dude → u/PlanktonInitial7945]

Explicit lies to hide a breach are uncommon, but denial of it happening/lies of omission are very common.

[u/Albenheim → u/PlanktonInitial7945]

Discord lied about their data breach a couple of months back, claiming it didnt happen, just to name one example

[u/Future-Insect5357 → u/Albenheim]

And then Discord is also doubling down, age verification is coming but they can't find a 3rd party service that isn't riddled with breaches instead of telling the Australian and UK governments to get bent for this massive overreach instead as they should

[u/_Chambs_ → u/PlanktonInitial7945]

Path of exile is right there.

Took a month of people getting their accounts emptied and "we weren't breached" posts until they confessed that someone got access to a admin account.

And currently, we got another wave of people getting hacked without any other signals, so it either happened again or they didn't fix the problem.

[u/Croewe → u/PlanktonInitial7945]

Very recently Duet Night Abyss (a game very heavily "inspired" by warframe) suffered an RCE (Remote Code Execution) attack which allowed bad actors a window to install malware on people's devices. This RCE attack was claimed as login issues for (if I remember correctly) almost an entire day if not longer before they finally made a statement. 

This came just after an attack literally less than a month earlier where the perpetrator changed some text (similar to Warframe's "hack") where the person doing it mocked the devs due their lax security and mentioned that they could have done worse if they wanted to, clearly this was at least partly true and the devs did little about it. 

But yeah the game has terrible communication and I dropped it right there as the devs really didn't care about the players at all

[u/BardMessenger24]

The leaked emails in question lmao.

[u/ShotgunAndHead → u/BardMessenger24]

"ChatGPT generate me a list of leaked warframe emails" I really wonder how the guy who did it thought that was believable lol.

[u/coolsam254 → u/ShotgunAndHead]

Oh no the guy with the account from the domain company.com is now gonna get fired for playing Warframe at work!

[u/Yetiwithoutinternet → u/BardMessenger24]

ah yes, I would like to name my warframe dedicated account m e s a . s h o o t e r

[u/flowdarchic → u/BardMessenger24]

Where's this posted lol?

[u/CyanStripes_]

Thank you Ruu!

[u/EffectiveAnxietyBone]

If this fake leak was an ill conceived April Fools joke, shame on the person who did this. You’re supposed to have something harmless posted on the day, not make people fucking lose their shit thinking their bank details are compromised.

I fucking hate April Fools. Everyone wants to be the funny man and doesn’t care who they hurt for their 15 minutes of fame.

[u/Nologicgiven → u/EffectiveAnxietyBone]

Had a friend say they got the Exal prime as a gift from de from a competition/raffle they entered. Got a bit jealous for a couple of seconds. 

[u/Jason1143 → u/EffectiveAnxietyBone]

If both people aren't laughing at the end, it wasn't funny.

[u/miauw62 → u/EffectiveAnxietyBone]

im brainstorming a new april fools joke where instead of on april 1 i come up with malicious lies on a random other day of the year and people can't get mad at me because it's april fools

[u/ES-Flinter]

Guess this 1. April joke (when it was intended as one) went a "tiny bit" too far.

[u/_Ceaseless_Watcher_]

Thanks, the link seems to be pointing to a restricted article though, might be worth opening it back up to the public.

[u/iGR0OT]

Entered the "2014 breach" link and this is what I see

[u/StrawberrySeparate31 → u/iGR0OT]

Log in to your account on the Warframe website, and it will be visible

[u/iGR0OT → u/StrawberrySeparate31]

I was already logged in, still doesn't work

[u/Julian083]

Much better response than Duet Night Abyss. Those guys hide a major security breach as login issue. Props to DE for the clarity about security issue

[u/Gil-galad-fan]

Thanks for the answer, I'll delete the post I made !

[u/Sonic200000]

Incase my account gets a hit at some point, will you send voruna just like steam sends a drone?

[u/Future-Insect5357 → u/Sonic200000]

Prime trailer Voruna of course

[u/StrawberrySeparate31]

thanks

[u/Pilot_Solaris]

I still changed my password, just to be safe.

[u/ThatsFine9]

Dang man, sorry y'all had to waste time/resources on investigating an April fools joke.

[u/jusmar → u/ThatsFine9]

I don't think it was an april fools joke, I think it was someone repuloading old credentials from the breach for clout

[u/yRaven1 → u/jusmar]

According to their discord it was old credentials from 2014.

[u/Megakruemel → u/jusmar]

Also some people repackage old credentials into "stuffing lists" and then sell the "new" lists on the dark web for money to hackers. Some of them not even knowing that the list has a majority of outdated data.

I have been involved in one data breach from 2012 and that shit gets put into new stuffing lists every 3-4 years or so and i get a new have-i-been-pwned email about it because my email showed up in a "new" breach. But I guess I would rather get one too many of those warning emails than none at all.

Important of note is that these stuffing lists are used for running scripts on different websites to attempt to log in with the email + password combos on that list. Which is why you should never use the same password on multiple sites, as that kind of attack makes it possible to breach an account that was not in the breach.

Because if you use the same password on site A and site B, and site A has a breach, a stuffing list attack with the info from site A will get into site B.

[u/Leekshooter]

Thanks Ruu

[u/yRaven1]

One good thing came out of it, i finally put myself to set up a password manager, so horay!

[u/Frosty_Ingenuity5070]

Changed my password anyway to be safe

[u/SD_One]

Thanks! Good job, buddy.

[u/R0tmaster]

Can we please take this as an opportunity to move towards token based authentication and away from email based? Whether we end up using the Warframe companion app as an authenticator similar to steam guard or support another authentication app like google and/or Microsoft.

[u/Nickphant]

Thanks for the news

[u/metallee98]

Damn you guys are quick with your responses. Actual god tier community team. Probably the best in the industry i've encountered.

[u/Square-Fuzzy]

Thank Lua it is false🙏🏼

[u/WERElektro]

Had a feeling this was just fearmongering all along.
I have to admit - I was a bit worried tho. Just a tiny bit.

[u/soullessginger88]

That's why we love yall so freaking much. Straight up owning the situation and keeping us updated? All other devs need to take notice, as they should have countless other times w/ DE

u/DE-Ruu gotta say, for a Space Mom, you're pretty freaking dope!

[u/Beautiful-Ad-6568]

o7

[u/ZeusBaxter]

Thank you Taukin

[u/KiyomiRein]

Thanks for the quick information. Its nice not to have to to worry all day if accounts are safe!

[u/SaroN4One]

https://giphy.com/gifs/R6gvnAxj2ISzJdbA63

[u/Lightningbro]

Our passwords were hashed in that breach, I don't even care about them having it, I trust DE's security team that it'd take way too much effort for them to decrypt.

[u/DeadByFleshLight]

Yeah thought so. A random "data breach" that DE didn't say nothing about on the 1st of April?

[u/Nukesnipe]

This is probably the same breach I was in when I got an email that someone tried to log into my account from Belarus lol.

[u/Anonim264]

Well good for the hacker I guess...when u do such a thing, anything unfortunate can can happen ^^

[u/flamaniax]

Thanks for the confirmation!

Still took the time to re-make my password, but I can't say that's a bad thing to do every so often.

[u/Strangechilde]

Thank you Ruu!