Subagames website database breach

[ultramage]

Hello, I have started receiving copies of spam from multiple sources that lists the unique e-mail and password I registered with to play Divine Souls, and tries to scare me to pay bitcoin. It uses a spam template that I've seen many times, and is generated from past leaked user databases. So I assume someone broke into and downloaded their database(s), and now is selling it to spammers. I do not know when exactly the breach happened; my account was made on 2015-11-30, so no earlier than that.

My password was long and random, which means the site was storing it in plain text. I recommend reviewing all your logins and changing every place where this same password was reused. I have updated my account on the subagames website with a fresh e-mail/password to detect any further leaks.

[Klax]

dw about it the game is basically been left to rot...

I have an account and I get it all the time and I still don't care.

also I always send them back nice try arse hole but this game is abandoned and can in my eyes do one...
so good luck with your spamming crappy life and get a real job. :P

not had a spammer msg me back now (happy days)

[ultramage]

The thing is that some people, especially kids and non-technical people who don't know any better, are likely to use the same password everywhere. Spam is the least of my worries. Once your e-mail address and password are leaked, people will try logging into your e-mail account. From there, they can then probably reset passwords on all the services you use that e-mail for (steam, paypal, twitter, work?). You definitely don't want to have that happen. They will also try that password everywhere else, and keep trying it on every other service in the future.

[Klax]

Originally posted by ultramage:

The thing is that some people, especially kids and non-technical people who don't know any better, are likely to use the same password everywhere. Spam is the least of my worries. Once your e-mail address and password are leaked, people will try logging into your e-mail account. From there, they can then probably reset passwords on all the services you use that e-mail for (steam, paypal, twitter, work?). You definitely don't want to have that happen. They will also try that password everywhere else, and keep trying it on every other service in the future.

true but since then my PW for everything is changed :P and only 2 are the same :P