Hackers hit crowd-funding site Kickstarter and made off with user information, the site said Saturday.
Though no credit card info was taken, the site said, attackers made off with usernames, e-mail addresses, mailing addresses, phone numbers, and encrypted passwords.
“Actual passwords were not revealed, however it is possible for a malicious person with enough computing power to guess and crack an encrypted password, particularly a weak or obvious one,” the site said in a blog post, adding that “as a precaution, we strongly recommend that you create a new password for your Kickstarter account, and other accounts where you use this password.”
The site said law enforcement told Kickstarter of the breach on Wednesday night and that the company “immediately closed the security breach and began strengthening security measures throughout the Kickstarter system.” The site also said “no credit card data of any kind was accessed by hackers” and that “there is no evidence of unauthorized activity of any kind on all but two Kickstarter user accounts.”
You can read additional information about resetting a password here. We’ve contacted Kickstarter for more info on the attacks and will update this post when we hear back.