VUDU has been compromised

[MifuneFan]

As I'm sure is the case with everyone that has a Vudu account, I just received an email notifying me that hard drives that included customer information was stolen from their offices.

We want to let you know that there was a break-in at the VUDU offices on March 24, 2013, and a number of items were stolen, including hard drives.

Our investigation thus far indicates that these hard drives contained customer information, including names, email addresses, postal addresses, phone numbers, account activity, dates of birth and the last four digits of some credit card numbers. It's important to note that the drives did NOT contain full credit card numbers, as we do not store that information. Additionally, please note if you have never set a password on the VUDU site and have only logged in through another site, your password was not on the hard drives.

While the stolen hard drives included VUDU account passwords, those passwords were encrypted. We believe it would be difficult to break the password encryption, but we can't rule out that possibility given the circumstances of this theft. So we think it's best to be proactive and ask that you be proactive as well.

SECURITY PRECAUTIONS:

If you had a password set on the VUDU site, we have taken the precaution of expiring and resetting that password. To create a new password, go to http://www.vudu.com. Click the "Sign In" button at the top of the page. Enter your current username and current password when prompted, then follow the instructions to reset your password securely. Also, if you use your expired VUDU password on any other sites, we strongly recommend that you change it on those sites as well.

As always, remember that VUDU will never ask you for personal or account information in an e-mail. Please use caution if you receive any emails or phone calls from anyone asking for personal information or directing you to a web site where you are asked to provide personal information.

As an added precaution, we are arranging to have AllClear ID protect your identity for one year at no cost to you. We have FAQs on our web site (vudu.com/passwordreset) to answer questions on the incident and to more fully describe how to use the AllClear ID service. We have reported this incident to law enforcement and are cooperating fully with their investigation. We want you to know that we take this matter very seriously, and we apologize for any inconvenience this may have caused you.

Thank you,

Prasanna Ganesan
Chief Technology Officer, VUDU

More info here: http://www.vudu.com/password_faq.html

[bhampton]

I didn't get the email.

I've never given vudu any money so I don't think I ever gave them a card number or anything.

I have about 70 movies on vudu,.... Never gave them a cent,...never will.

I don't really need or use the movies either ,.... I don't see any problem with having them though and I'm not into trying to resell vudu codes.

[swd0010]

I didn't get the email, but whenever you sign in, they're requiring you to update your password.

[ChoppedUp]

I got the same email.

[bsweetness]

No email here, which I find a bit odd considering how much I've used Vudu.

[MifuneFan]

Odd. Perhaps they're sending them in waves or something.

[Blackshield]

I was prompted to change my password upon login and there is a big long thing on the site. but didn't receive any email.

[acrylick]

got the email, and changed my PW right away

[EnigmaticWarrior]

Anybody use AllClear ID before? Just curious, since VUDU is giving us one free year of it as compensation for this incident.

[MifuneFan]

I remember Sony offered the same thing too when PSN was compromised, but I didn't take advantage of it back then, and I won't now either. I don't think I even have a CC on my Vudu account, but even if I did, I don't feel too concerned about this.

I could be wrong, but I don't get the impression that the theft was aiming at stealing hard drives, it just happened to be among the things that was taken. Who knows if the thieves are even capable of decrypting any really sensitive info off the HDD's, or even care to do so in the first place.

[Jutty]

Originally Posted by Blackshield

I was prompted to change my password upon login and there is a big long thing on the site. but didn't receive any email.

Same thing as me,,( i couldnt be arsed to re-write it again)

[Antoino]

Originally Posted by EnigmaticWarrior

Anybody use AllClear ID before? Just curious, since VUDU is giving us one free year of it as compensation for this incident.

Rather have a few free movies... its like they don't know what we want lol

[Clark Kent]

Originally Posted by EnigmaticWarrior

Anybody use AllClear ID before? Just curious, since VUDU is giving us one free year of it as compensation for this incident.

I would also like to know the feedback about this service. Apparently anyone that doesn't use Facebook to log into VUDU had their information stolen.

[MaCruz]

Got the email @ 4:51pm EST.

Just changed my PW as well.

[blu-ray_girl_fan]

Originally Posted by MaCruz

Got the email @ 4:51pm EST.

Just changed my PW as well.

Isn't this where you post, "Got 'em! "

[MaCruz]

Originally Posted by blu-ray_girl_fan

Isn't this where you post, "Got 'em! "

Haven't done that in a while

[swd0010]

Originally Posted by Antoino

Rather have a few free movies... its like they don't know what we want lol

Hmm...now there's an idea...I wonder how we could get a movement going to have a free movie of our choice...or at least raise the limits on credits to apply to accounts or something.

[jw]

i got email also, I dont have any CC info on there so I am not too concerned.

[arcadeforest]

Got the email and changed my password as well.

[strumdogg]

Thanks for posting, MifuneFan!

It seems I was a bit late to the game on this.

(I gotta start following Digital Movies more).