Feeling insecure about the data breach.

[rapt00r4]

Did the hackers stole the Billing Address and Credit Card informations if you bought stuff in Town of Salem via steam? I'm really concerned about that. Such a shame for ToS staff to let this happen.

[Flavorable]

No. BMG doesn't handle payments at all, that all goes through a third party.

[rapt00r4]

Thank you for clarifying!

[Taebrythn]

Originally posted by rapt00r4 X GOD:

Did the hackers stole the Billing Address and Credit Card informations if you bought stuff in Town of Salem via steam? I'm really concerned about that. Such a shame for ToS staff to let this happen.

why are you blaming the staff? its not their fault that someone hacked it. its the hackers fault. nothing is 100% safe

[Decap]

really didnt even bother to hash and salt the password database, man these are some lazy devs lol takes what 3 clicks? :p rip

[Ðøηḓø_/| ( ͡° ͜ʖ ͡°) of Cykaland]

thankfull the pass i used for town of salem was the pass i use for stuff that is uselss like games and such

[Dankan37]

Yeah, I use one of the password generated by the system.

[Dread]

Wait what, I'm hering about the data leak right now. Can someone fill me in please, is this important. I use my steam account to play TOS

[Echokis]

Glad that all of this happened on the 23-25th, and we just learn about it now. The hackers have had plenty of time to access our data.

I unfortunatly used the same password for ToS for my email. Mysteriously someone attempted to access my gmail account using the correct password on the 25th. Meaning ToS did not use proper security to store the passwords. In any sane world the passwords would have been hashed and unusable to the hackers. This shows EXTREME neglect on the part of the devs.

Thanks for handing our personal information to hackers.

[Rex]

Originally posted by Destroyer:

Wait what, I'm hering about the data leak right now. Can someone fill me in please, is this important. I use my steam account to play TOS

If you used the same email and password, time to change it.

[Dark D. jesper]

For those who directly uses Steam login option to access our accounts,does it mean we need to change steam password too?

[KK_Me]

Originally posted by Dark D. jesper:

For those who directly uses Steam login option to access our accounts,does it mean we need to change steam password too?

+1

[jdhthegr8]

Originally posted by Fatikis:

I unfortunatly used the same password for ToS for my email. Mysteriously someone attempted to access my gmail account using the correct password on the 25th. Meaning ToS did not use proper security to store the passwords.

No, it means you didn't use proper security in using passwords

[KIM JONG UN]

Originally posted by KK_Me:

Originally posted by Dark D. jesper:

For those who directly uses Steam login option to access our accounts,does it mean we need to change steam password too?

+1

+1

[Snarks]

Can we please get an update regarding Steam users?

[KIM JONG UN]

Originally posted by Dark D. jesper:

For those who directly uses Steam login option to access our accounts,does it mean we need to change steam password too?

"No, all Steam shares is the session ID, apparently" someone replied with "Your ToS account still has a password, you just don't need to type it in for the Steam login. Regardless, it's still been leaked from BMG, so your ToS account and any other accounts that share that password are compromised unless you change the passwords. Don't reuse the password that you use for the ToS account."

This is all i can find. It would be nice to have a moderator or developer answer this question but they're busy going around agreeing with users claiming someone has a vendetta against them while at the same time posting about their vendetta involving a few botters on reddit.