SwatSec got the account Info about every player in the game

[ibotje]

wtf is this and what are we going to do now? :/ RIP our account
http://www.youtube.com/watch?v=184y3YeB2wg

[炊飯器]

Well...................... Fantabulous.

[Sebastian]

lets all give kabam a sarcastic slow clap for their account "security".
clap.
clap.
clap.

[Handballermann]

clap.

[InsaneFirebat]

If you have any web accounts, I would recommend changing passwords as soon as the game is available again. Your Steam account should be safe, as Steam doesn't send your password to the game servers you play on. Only accounts created at realmofthemadgod.com or possible Kabam's page can be vulnerable from an attack like this.

[Qaerid]

@InsaneFirebat : passwords are not stored like that I think. All this information are encrypted, even in the db. But to prevent any problem, change it if the website is still running :)

[Handballermann]

Summary of what is happening.

[Spark☆]

So I heard about the game's hacking stuff from a friend and then came here to check more info on it...
>"even the ones who do not even play it anymore"
Well... piss.
Though it has been a long while - What, 2 or 3 years? - since I stopped playing on the realmofthemadgod.com website... Hope he doesn't use any e-mails or stuff in the account. o.o

[Basil Greengale]

Originally posted by Sebastian:

lets all give kabam a sarcastic slow clap for their account "security".
clap.
clap.
clap.

clap
clap
clap
clap

[Shai]

Sorry, but this has gone too far. There's also word about him having put a virus into the Steam client. Idc about us not being able to play, but Kabam's lack of proper security has put our accounts as well as our machines in danger. Not to mention that some might use the password for their accounts for other things as well. Our RotMG account might be the least of our worries, he has access to our emails and passwords. Anyone that uses the same password for their email has a huge problem and should change it right away.

[InsaneFirebat]

Originally posted by Shai:

Our RotMG account might be the least of our worries, he has access to our emails and passwords. Anyone that uses the same password for their email has a huge problem and should change it right away.

Anyone who uses the same email/pass combo for everything has security holes of their own. Your email address should never use the same password as the accounts you register to it. If you do have accounts that share the same email/password combo, I'd suggest you change them immediately.

[Shai]

Originally posted by InsaneFirebat:

Originally posted by Shai:

Our RotMG account might be the least of our worries, he has access to our emails and passwords. Anyone that uses the same password for their email has a huge problem and should change it right away.

Anyone who uses the same email/pass combo for everything has security holes of their own. Your email address should never use the same password as the accounts you register to it. If you do have accounts that share the same email/password combo, I'd suggest you change them immediately.

That's a fair point, but I think we all know that there are plenty who do use the same password for both their account and their email. It's something that should still be taken into consideration. Many have made this mistake, and many will keep making this mistake.

[Dimmer]

Originally posted by Qaerid™:

@InsaneFirebat : passwords are not stored like that I think. All this information are encrypted, even in the db. But to prevent any problem, change it if the website is still running :)

If so he still has the sourcecode which can you know.

[rotmg_sgtsunshine]

Please check the official threads at the top of this forum for the latest info about the security breach.

[Kaupsýslumaðurinn]

clap

clap

clap