Reassure me please NCNA

General Discussion Started Last reply 23 posts
Simple question, if you have discovered such a serious breach that you saw fit to reset some game passwords and PlayNC account passwords, are you suggesting that details of PlayNC accounts could have been compromised? If so, could you reassure me that my credit card details have not been accessed, as these are held against my PlayNC account?

Thanks in advance.
Good question
/agree
The online storage doesn't display the credit card directly...though hacking into the database could certainly allow reading such things. Meh, I keep an eye on my CC every day. Anyone you hand the card to at a store could run it through a seperate scanner. Ever hand your card to a waiter? What do you think he could do with it before coming back to the table? Always keep an eye on card activity.
From what I understand, only the game login passwords were changed. The master account PW was only changed if it was the same as the login password. This tells me that if there was a security breach that it would be only the game server. Credit card info is not stored on the game servers, so there should be no risk.

If the PlayNC Master accounts server were breached, then it would not only affect L2 players, but every other game associated with plaync.

From what I understand, only the game login passwords were changed. The master account PW was only changed if it was the same as the login password. This tells me that if there was a security breach that it would be only the game server. Credit card info is not stored on the game servers, so there should be no risk.

If the PlayNC Master accounts server were breached, then it would not only affect L2 players, but every other game associated with plaync.



I would agree if the message had not stated that some people may have to reset their PlayNC Master Account passwords and I hadn't had a master password reset that was not the same as the game password.

Whilst I am sure that it's OK, I would simply like confirmation from NCNA that all is well in this department. I can stand losing a game for a few hours, losing money from my bank account would be a different matter.
Trust me - there is no risk of your CC details being compromised. PlayNC does not mix their CRM database with their Account management... Therefore Im pretty sure that all transfers are being managed by a separate system, which are based on importing and exporting files with the system that handels our account management - and no online activity between the two. So - your CC details are safe.

Note:
I have no personal experience with PlayNC, but have tested quite a few systems for large coorporations - and that is how they usually work. Besides - there are leagal regulations on how to store confidential CC data.
I dont mind not being able to play either. I do mind not being able to cancel my credit card payment though, NCSOFT really needs to improve their plaync reset password to not be so strict on exact answer. Its not like it confirmed my answer to my hint question or EMAILED me the registration information when I first created the account.

I would agree if the message had not stated that some people may have to reset their PlayNC Master Account passwords and I hadn't had a master password reset that was not the same as the game password.



The reason that Some may have to reset both is if they had the same password for their master account as thier game login. My reasoning is that if there was a breach of the Master Account Server, then All the master account passwords would have been reset.

Simple question, if you have discovered such a serious breach that you saw fit to reset some game passwords and PlayNC account passwords, are you suggesting that details of PlayNC accounts could have been compromised? If so, could you reassure me that my credit card details have not been accessed, as these are held against my PlayNC account?



Our customers' credit card information is secure. Only PlayNC master account passwords that matched Lineage II game account passwords were reset as an additional security precaution.

Thank you!

The reason that Some may have to reset both is if they had the same password for their master account as thier game login.



/whistles
/looks up in the air :)
What I want to know is...if this was found Monday during the mergency maintenence, why were the servers brought back up, then brough down again on Wednesday? Just a thought, but shouldn't you have fixed this during Monday's maintence and not a day later?
Perhaps they needed to discuss what to do first, maybe they needed to identify the severity of the exploit and perhaps communicate with the other L2 territories.

I doubt they just did this to achieve maximum ****** off level in people
I'm not saying they did it to piss people off, I'm just asking about the chain of events. One would think if they found it Monday, and it was as severe as they say, servers shouldn't have gone back up to be taken back down.
They might have found something wrong, not knowing how severe it was at the time, they might have passed it on, was then told that this could result in someone learning the passwords of peoples accounts, someone at NCSoft made a call to take all the servers down immediatly, and the rest is history.

As shown in the "hi" thread, it does seem like NCSoft had a meaning behind their madness.

And I don't think many is as frustrated as I am, basically I am looking at it being Game Over for me if support doesn't come through. So, I am not just sitting here making excuses for NCSoft because I have nothing to lose.
My heart goes out to all players not haveing their regkeys available anymore... Best of luck to you all.
Fully understandable that aliases, hint-questions and regkeys are lost after several years of playing.
Luckily I found mine on an old back-up from two years ago, so Im pretty sure Ill get a new password with those...
lucky me.. my harddrive with the needed info crashed a year ago..
Ouch, that sucks. Good luck figuring it out


Simple question, if you have discovered such a serious breach that you saw fit to reset some game passwords and PlayNC account passwords, are you suggesting that details of PlayNC accounts could have been compromised? If so, could you reassure me that my credit card details have not been accessed, as these are held against my PlayNC account?



Our customers' credit card information is secure. Only PlayNC master account passwords that matched Lineage II game account passwords were reset as an additional security precaution.

Thank you!



As I stated, I had a master account password reset that was not the same as my server password (I know this because I never have the two passwords the same) but thanks for the reassurance.
When I log in my PlayNC account I can't see my own CC information, even to renew. But that doesn't mean anything.

I've had a few glitches right before the downtime telling me the boards were possibly compromised and the SQL server (keeping the versions and file paths for myself... ty) being unresponsive.

So you can't KNOW nor BE SURE of anything.
Best thing you can do is make a call to your CC company to tell them your info MIGHT have been compromised. And keep a close eye on your bills. If anything happens, send them a screenshot of the Downtime Topic and then you'll only have have to contest the purchases made.

I can't tell if it came from here but I had to revoke my CC last week due to a purchase of $400 made with it and with a delivery address in UK where I do not live. Due to this, the purchase was flagged as 'possible fraud' and I was contacted by my CC company. The purchase was then canceled and I've received a new CC.

The only weird thing is L2 is the only thing I've ever bought online with that card.
But don't draw conclusions too fast. It may have been a waiter near my town who wrote it down and tried to use it in a foreign country.
Or a hijacked atm, or a faulty email, God only knows where you have filled in CC information. Identity theft is a very prevalent occurence these days. Connecting it to single sources is almost impossible. Somebody could simply rifle through your trash and likely be capable of such things.

When I log in my PlayNC account I can't see my own CC information, even to renew. But that doesn't mean anything.




If it does mean anything to you, plaync and lineage2 have different and it own security. Plaync is billing centre and there are many NCsoft games around it.
Thats why accessing info in one of the game, doesn't mean accessing any billing info. And thats the reason, why only lineage2 password was being reset, as well as matched password in plaync database.

On other hand )) Everything is possible. So it'd be much better if NCSoft itself confirms security rank and they did it.


Mystril:
Our customers' credit card information is secure. Only PlayNC master account passwords that matched Lineage II game account passwords were reset as an additional security precaution.



Somebody could simply rifle through your trash and likely be capable of such things.


Actually not since the CC was quite new but in general you're right.