6pm.com password change???

[cchavez]

Did anyone else get an email to change their password b/c their system was hacked?? Is this email legit? Thanks

[MMMommy]

I got it too. I am pretty sure it is legit. When I went to Zappos site, same thing. Aren't they owned by Amazon (Zappos, Endless, and 6pm)?

[MichelleRC]

Yes--I was ordering some shoes for DS this evening from Zappos and had to change my password.

[Melaine]

Long thread about it on slickdeals: http://slickdeals.net/f/3829242-Heads-Up-6pm-Bad-News

[Mom of XX&XY]

News says 24 million may have been part of this was a scam. The website was HACKED! Change your passwords ASAP!

[atroxnixfemina]

Just as an FYI:

http://blogs.zappos.com/securityemail

Personally (and I work in Internet Security) - I wouldn't freak out. If what they noted was correct, credit card/payment info wasn't compromised.

I would change your password, yes. And, if you use the same password on Zappos/6pm/etc - I would change the password on any other sites which you had programmed the same password.

But - the passwords were stored cryptographically. It's *possible* for someone to break a crypto, but depending on the crypto type, it could take a looooong time, if ever.

With an attack of this magnitude, the fact that they are working with the FBI is expected, and the right thing to do. I personally appreciate that they performed timely correction (by locking out the old password) and notified their customers quickly.

Just my $.02.

[indigo99]

Their sites are too slow to even let me make the change right now, but I had to change pw for a bunch of other sites that used the same one. What a waste of my time.