Electronic Arts, owner of BioWare, is asking users of the Neverwinter Nights forums to re-register on the site after hackers stole several thousand accounts.
An email from BioWare GM and Electronic Arts veep Aaryn Flynn said no credit card or social security numbers had been pinched: "However, hackers may have obtained your user account name and password, email, password, country and date of birth. As a result, we have disabled your legacy Bioware Account..."
Flynn apologised for any inconvenience but asked users to change passwords that they had reused on other sites.
Some 18,000 accounts were breached – a small percentage of the total, according to the company.
It further warned that if BioWare accounts were linked to EA accounts then these may have been compromised as well.
EA said it would "evaluate the seriousness of the breach".
There's a Q&A on the BioWare hack here...
Recent weeks have seen everyone from CitiBank to the CIA admit to hacks and data losses. Most of these have been claimed by self-appointed moral guardians of the interwebs LulzSec, but it has yet to claim credit for hacking the BioWare forums.
The email in full:
"Yesterday (14 June), we learned that a hacker gained unauthorized access to the decade-old BioWare community server system associated with the Neverwinter Nights forums. We have taken appropriate steps to protect our consumers' data and launched an ongoing evaluation of the seriousness of the breach. We have determined that no credit card data was compromised, nor did we ever have or store sensitive data like social security numbers. However, hackers may have obtained your user account name and password, email, password, country and date of birth. As a result, we have disabled your legacy Bioware Account. To create a new account please visit social.bioware.com.
We take the security of your information very seriously and regret any inconvenience this may have caused you. If your username, email address and/or password on the Neverwinter Nights forums are similar to those you use on other sites, we recommend changing the password at those sites as well. We advise all of our fans to always be aware of any suspicious emails or account activity and report any suspicious emails and account activity to Customer Support at 1-866-543-5435.
If you have questions, please visit our FAQ at http://support.ea.com/app/answers/detail/a_id/5367 or contact Customer Support at the phone number above.