Thanks for the incoming spam, Kickstarter :-P
Not sure what the implications could be for the rest of my personal info.
And in typical Kickstarter fashion of keeping anything unpleasant or negative away from the public eye and selectively present only what they want from their POV (which usually is just template PR stuff), they have disabled the comments on that blog entry.
I (finally) dismissed Kickstarter a year ago for a number of reasons, but if I hadn't, this would have definitely been enough reason to do so now. For all their boasting about their growth and financial success, they sure have a very poor security level and conscience, they didn't even noticed the bridge themselves - I assume that if law enforcement officials tracked it down and alerted them, then it's serious business (who the hackers and their intentions are).
Momo1991: Because they're lying on their PCI DSS questionnaires cause actually doing what it really requires to keep data safe is expensive.
All more reason to make the on-site data security assessment mandatory when personal info and transactions data are stored.
nadenitza: Selling the database to the highest spam bidder whilst blaming it on a hacker attack? I never understood why would a hacker bother getting into trouble and always leave the credit card data section untouched...
But then, we only have Kickstarter CEO's word that credit card data was not stolen, i.e. the word of a company that had to be alerted that they had been hacked (according to their own statement again).