Browse
Category
DiscussionsGeneral

PSA: IndieGameStand security compromised

Open
ryuga

Apparently IGS is having the same issue Steam had some time ago. Pages remain cached, and you might find yourself logged into someone else's account.

If you haven't logged recently, it's probably safer to stay away from the site but if you did actually log in recently, it might be safer to delete your personal data from the site, as random strangers can view all of your personal data and access your games/keys.

See this for reference:

https://www.steamgifts.com/go/comment/Q4R5iXc
https://www.reddit.com/r/GameDealsMeta/comments/6fetpt/indiegamestand_possible_security_issue/

At least one other user confirmed he could access someone else's account:
https://www.reddit.com/r/GameDealsMeta/comments/6fetpt/indiegamestand_possible_security_issue/diith9o/

I've contacted IGS yesterday as soon as I found out about the issue, received no answer so far, so whoever is working on the site (if any) might still not be aware of the issue.

6 years ago

Comment has been collapsed.

1 Comment
ryuga

UPDATE: they are aware of the issue now:

Hi,

Sorry for the late response.

We are fixing the security issue as of the moment to make sure that no other users will be affected. We are also in constant communication with our technical team regarding this, Security is very important with us and we take it seriously. We really apologize for this inconvenience and we sincerely thank you for reporting this to us.

Rest assured, this is already being handled accordingly.

Warm Regards,
IGS
Customer Support

6 years ago
Permalink

Comment has been collapsed.

Sign in through Steam to add a comment.