
As it became known, on February 12, law enforcement officials contacted the Kickstarter team to inform them about the hacking of their project. Some hackers got access to personal data of registered users.
The team closed the security hole, but the data is already gone. As they themselves say in a
press release dated February 16 , there was no leakage of data on bank cards (and how, because Amazon is making payments on the project).
Leaked user names, e-mail, home addresses, phone numbers and encrypted passwords. Early user passwords were encrypted with salt and SHA-1 several times. Later - via bcrypt.
Naturally, the team apologizes to the users of the service and assures that they are doing everything possible for the sake of improving the safety of users.
However, the more complex the project, the more difficult it is to ensure this security. It is useful to recall this again - security does not happen much. Take care of yourself and your data.