**Mastery Loadouts**
Due to issues related to the release of Mastery Loadouts, the "free swap" period will be extended.
We have not set an end-date for the new period, but we will update this banner when we have more information.

Possible data leak on forums

Spidermonkey902Spidermonkey902 Posts: 63 ★
in General Discussion
I was just logging into the forums when I was redirected to a page that said the page was going under maintenance when I scrolled down I found there was a serious data breach on the 30th October relating to our usernames and passwords to this website why have I had no information regarding this? I take my passwords seriously and to know they were free for someone to take including my ip address is very worrying for me can you please explain what happened and whether we all need to be changing our passwords @Kabam Miike @Kabam Zibiit @Kabam Vydious or anyone else thank you

Comments

  • Spidermonkey902Spidermonkey902 Posts: 63 ★







  • Spidermonkey902Spidermonkey902 Posts: 63 ★
    Sorry some of the pictures are out of order but that's all the information I have
  • Kabam LyraKabam Lyra Posts: 2,936 ★★★
    As noted toward the bottom of the first screenshot, SSO (single sign-on) accounts were not affected because their data is not stored in Vanilla forums. All players on our forums are using SSO connected to their game accounts. Apologies for any confusion here.
  • Spidermonkey902Spidermonkey902 Posts: 63 ★
    How does that work when I signed up to the forums website it asked me to create a user name and password it didn't mention it would be linked via the game also I can't see how it could be when the website is separate to the game can you explain a little more as I'm still confused how you can use vanilla forums and they don't have the username and password on their server isn't it their server we log into each time we use the forums?
  • Spidermonkey902Spidermonkey902 Posts: 63 ★
    Tbh I just want an answer to my very simple question I've used forums on websites before you have 2 types of servers when logging in one use another social network to log in and the other is when you create the details with the forum sever directly when I came here I was given the social option and sign up option. I signed up therefore my details would be held on the forum server which would mean the breach would effect me would it not?
  • Spidermonkey902Spidermonkey902 Posts: 63 ★
    Also if we are using our in game log ins to do this why is it I have to sign in everytime I'm on the website using my email and password in order for that information to work it would have to be saved on the forum server surely?
  • DOKTOROKTOPUSDOKTOROKTOPUS Posts: 1,501 ★★★
    i sold my soul to mephisto, a password is nothing compared to that
  • Savio444Savio444 Posts: 1,781 ★★★★
    RazorDevil said:

    You've seen too much.



  • NeotwismNeotwism Posts: 1,803 ★★★★★
    Thanks for sharing this info. It would be nice to get more clarification about the incident
  • Kabam MiikeKabam Miike Posts: 8,208
    The information that we were provided by Vanilla (our Forum Service provider) was that anybody affected would be forced to reset their Password (I had to reset mine because this account is not linked to a game account), and that our Users were not affected because of our SSO login.

    If you have more questions about this, you can reach out to Vanilla, but this is all the information that we have.
This discussion has been closed.