Epik.com security breach (2.Viewing)

Hello,

We are contacting you to notify you of an urgent security notice. Despite the extensive security practices we use to protect our platforms and customer information, we have confirmed an unauthorized intrusion into some of our domain-related systems.

We have mobilized the full force of multiple cyber security teams to assess the scope of this intrusion. We are taking aggressive action to completely secure and remediate all potentially affected systems, while complying with all applicable laws. As we work to confirm all related details, we are taking an approach toward maximum caution and urging customers to remain alert for any unusual activity they may observe regarding their information used for our services – this may include payment information including credit card numbers, registered names, usernames, emails, and passwords.
At this time, we have not confirmed that your card information has been compromised. As a precautionary measure, you may choose to contact any credit card companies that you used to transact with Epik and notify them of a potential data compromise to discuss your options with them directly. Should you observe any unauthorized activity, please document and report it immediately.

We are notifying you because we consider your privacy and security our single greatest priority. Our mission to provide legendary service to all customers remains unchanged. We appreciate your support as we work through the full resolution of this situation, and we will continue to provide you with ongoing updates as we learn more.

Thank you,
Epik Security Team

Ugh!
Never had a domain there and decided 2 weeks ago to try them out with a couple of transfers and this happens *DONT_KNOW*

They hype their universal login which I personally don't trust. The same login across different services leaves you vulnerable to having all the services hacked. That's why I never login to other accounts with facebook or google.

Call your credit card company and have them send you a new card, the information is now confirmed as leaked.

https://id.federatedidentity.com/auth/


I worry about their federated login which combines the login for all services.

If they are going to keep using that they have to make sure that two factor is active on all accounts because if one service is compromised all will be with a single login.