Public Announcement - 04/15/2012

[Vlada]

Public Announcement

April 15th, 2012
The SWGEmu Staff

Last night at around 1AM EST our staff discovered hackers may have obtained personal information from SWGEmu forums and IRC backups. We are today advising the personal information you provided us in connection with your SWGEmu account may have been compromised. Stolen information includes, to the extent you provided it to us, the following: username, email address, birth date and hashed password.


There is no evidence that our main database was compromised. It is in a completely separate and secured environment.


We apologize for the inconvenience caused by the attack and as a result, we have:

1. Temporarily turned off Liberator server;
2. Temporarily turned off our website and forums.
3. Quickly taken steps to enhance security and strengthen our network infrastructure to provide you with greater protection of your personal information.
4. Reset all the passwords, everyone should be getting an email (from daemon@site.swgemu.com) containing their randomly generated password. As soon as you are able to log on, please follow this link to change your password.

All those that didnt receive an email containing their new password should contact our support on IRC #swgemusupport channel or by email support@swgemu.com


We greatly appreciate your patience, understanding and goodwill as we do whatever it takes to resolve these issues as quickly and efficiently as practicable.


For your security, we encourage you to be especially aware of email scams that ask for personal or sensitive information. SWGEmu will not contact you in any way, including by email, asking for your personal information. If you are asked for this information, you can be confident SWGEmu is not the entity asking.


To protect against possible identity theft, we encourage you to remain vigilant, to review your account statements and monitor your E-mail, SWGEmu forums, Test Servers and Mantis accounts.


Sincerely,

~ The SWGEmu Team

[jedimonkeylizard]

And if we are perm logged in that would mean the password isn't corrupted and doesn't need being reset?

[Dialgo]

Silly hackers trying to mess up a good thing...Keep up the good work!

[nealoc187]

what does "hashed password" mean?

[Vlada]

what does "hashed password" mean?

Password Hashing

And if we are perm logged in that would mean the password isn't corrupted and doesn't need being reset?

Perma logged or not, your password was changed, you will be logged on forums but you wont be able to log in game.

[Chuparua]

Must've been Brokovo, I hear he's always hackin SWGEmu.

[buckyboo]

so what does it mean if the big database was compromised?

[lordkain]

Silly hackers get a epic fail for this one!

[Vlada]

so what does it mean if the big database was compromised?

Hackers may have forums and IRC info, IP's, user accounts info, blah, blah. blah.

[sgtfunkadelic]

Thanks for resolving this issue so quickly and keeping us informed throughout. If this had happened to sony they probably would have shut down their service for a fortnight

[Vlada]

This has been a long, long day.

[Superjebus]

Thanks for the update, and the quick resolution. SWGEmu FTW.

[Asoulan]

edit: nevermind...problem solved

[Someoneimportant]

Hahahahahahhaa

[na85]

Last night at around 1AM EST our staff discovered hackers may have obtained personal information

You discovered personal info had been compromised at 1AM and don't post about it until the next evening?

Why is it that this project is continually plagued by unprofessionalism?

Explain to me please why a site-wide email wasn't sent out immediately upon discovery like every other major community would do?