Hackers struck crowd-funding website Kickstarter and had access to user details, the website announced Saturday. No credit card details was accessed, the site claimed, attackers made off with usernames, e-mail addresses, emails, phone numbers, and encrypted passwords.
“Actual passwords were not revealed, however it is possible for a malicious person with enough computing power to guess and crack an encrypted password, particularly a weak or obvious one,” the site stated in a press release, adding, “as a precaution, we strongly recommend that you create a new password for your Kickstarter account, and other accounts where you use this password.”
Kickstarter said law enforcement officials informed Kickstarter of the breach on Wednesday evening which the company “immediately closed the security breach and began strengthening security measures throughout the Kickstarter system.” The website also stated “no credit card data of any kind was accessed by hackers” and that “there is no evidence of unauthorized activity of any kind on all but two Kickstarter user accounts.”
You can view a FAQ and tips on creating and saving a new password via their blog post here.