Report: 1.7M Steam keys for Dirt 3 compromised

A Codemasters/AMD promotion which awarded new video card purchases with a free code for Dirt 3 was compromised over the weekend. Although this sort of promotion isn't unusual, the promotional codes were apparently stored on an unsecured webserver, meaning that for the past few days, anyone who found the address could view (and pilfer) them.

An initial report on Kotaku estimated that somewhere in the neighborhood of 3 million codes were compromised. The report was later updated based on the findings of a Kotaku comment poster who claims to have seen eight separate lists of the Dirt 3 promotional codes, totaling 1.7 million.

Kotaku also reports that Codemasters is trying to "'block' hackers' access to the game," though (at least on the surface) referring to those who accessed information displayed on a public webserver as "hackers" seems like a bit of a stretch.

AMD Graphics has since issued an official statement about the issue, clarifying that the compromised codes were being hosted on a third-party fulfillment agency website, not by Codemasters or AMD. The statement reads as follows:

This past weekend, activation keys associated with free Dirt 3 game vouchers shipping with select AMD products were compromised. These activation keys were hosted on a third-party fulfillment agency website, www.AMD4u.com, and did not reside on AMD's website. Neither the AMD nor Codemasters servers were involved.

We are working closely with Steam, Codemasters, and our fulfillment agency, to address the situation. AMD will continue to honor all valid game vouchers, however the current situation may result in a short delay before the vouchers can be redeemed.