Softpedia
 

NEWS CATEGORIES:



NEWS ARCHIVE >>
SOFTPEDIA REVIEWS >>
MEET THE EDITORS >>
Home > News > Security > Data Leaks

December 13th, 2010, 13:46 GMT · By

DeviantART Members Have Their Email Addresses Leaked

SHARE:

Adjust text size:


Data breach at marketing company exposes emails of deviantART users
Enlarge picture
DeviantART alerted members subscribed to its mailing list that their email addresses have been exposed during a data leak at its marketing partner.

The company does not specify the circumstances under which the breach occurred, but notes that besides email addresses, usernames and birth dates might also have been copied by unauthorized persons.

"Silverpop Systems, Inc., a leading marketing company that sends email messages for its clients, told us that information was taken from its servers. This was probably part of a sweep by spammers.

"As a result, email addresses belonging to deviantART members were copied. Corresponding usernames and birth date may also have been removed," the company wrote in an email to its users.

deviantART breach notification email
Enlarge picture
DeviantART also stresses that the security breach did not involve any of its servers and their data and that they severed ties with Silverpop because of the incident.

The scope of this incident might be massive, because the website, which describes itself as the largest online social network for artists, has over 13 million registered accounts.

This makes the email leak a lot bigger than the one that occurred at Gawker Media over the weekend when hackers copied the user database and posted it online.

Fortunatelly no account passwords were leaked in deviantART's case, which would have made things a lot more complicated, as the Gawker incident showed.

"The likely result of this event might be an increase in spam to your email," deviantART writes in its notification email to users. However, some of these spam campaigns might prove more dangerous than others.

It wouldn't be surprising if spammers would craft emails that appear to be sent by deviantART, but lead users to malicious websites or instruct them to open infected attachments.

TELL US WHAT YOU THINK:

5,188 hits · 8 comments · Link to this article · Print article · Send to friend · Subscribe to news

MUST-READ RELATED ARTICLES:


Hackers Compromise Gawker, Expose User Passwords

Boards.ie Database Hacked

The Pirate Bay Hacked

PerlMonks ZF0 Hack Has Wider Implications

READER COMMENTS:


Comment #1 by: Hah on 13 Dec 2010, 23:12 UTC reply to this comment

"Fortunatelly no account passwords were leaked in deviantART's case, which would have made things a lot more complicated, as the Gawker incident showed."

Tell that to the people who had their accounts broken into and deactivated.

Comment #1.1 by: Lucian Constantin on 14 Dec 2010, 14:41 GMT

I'm not sure I follow. Do you mean there were people who had their deviantART accounts broken into and deactivated because their email address was leaked?

Comment #1.2 by: Aaron on 07 Jan 2011, 13:28 GMT

Oh come on, don't play along with the dArama. You can't get into the account simply because you had the e-mail address. You have to have the password. deviantART has reported that they have discovered instances where through POOR PASSWORD SECURITY (this is user-controlled and deviantART has no control over this) the passwords may have been guessed, and if the deviant used the same password for their e-mail address they may have been compromised.

TL;DR - user ignorance. Not saying that people are stupid or idiots, they just need to be properly educated.


Comment #2 by: Piffles on 14 Dec 2010, 16:54 UTC reply to this comment

What the..? o-o


Comment #3 by: Citizen Dos on 14 Dec 2010, 23:56 UTC reply to this comment

Highly trained government sponsored "hackers" are actively culling commercial databases looking for "bad" citizens. Of course, "bad" is defined by the wealthiest corporate executives puppeteering your government. By the way are you compliant yet? Is your web service or site wiretap friendly? Get informed. Use your brain to learn more than what the media tells you.


Comment #4 by: DA user on 15 Dec 2010, 06:43 UTC reply to this comment

Poor Draconis-Wyrm...


Comment #5 by: WTF on 17 Dec 2010, 12:36 UTC reply to this comment

Oh how great. Lots of members of deviantart have been hacked into and their accounts "deactivated". Emails are suddenly leaked the next dA members are losing their accounts roughly in the same time frame? Seriously. Screwed up on both sides that nobody made this official news to NONE of dA's members as soon as it happened.

Comment #5.1 by: Lucian Constantin on 17 Dec 2010, 13:30 GMT

Since this leak was only limited to email addresses and not usernames and passwords (there is no reason to share user/passwords with marketing partner), I suspect these account break-ins you and other people mention, might be related to the Gawker Media leak.

A database of 1.3 million accounts (username password email) has been leaked from Gawker (Gizmodo, Lifehacker, Kotaku, etc.) last weekend. Probably some of those people used the same user/email password on deviantART.

Copyright © 2001-2012 Softpedia. Contact/Tip us at

WindowsGamesDriversMacLinuxScriptsMobileHandheldNews

SUBMIT PROGRAM   |   ADVERTISE   |   GET HELP   |   SEND US FEEDBACK   |   RSS FEEDS   |   UPDATE YOUR SOFTWARE   |   ROMANIAN FORUM