Site Breach Information and Security Update

[Guest Mr. Flamegoat]

Over the last couple of days we've had several reports that information from this forum had been leaked. After investigating, we can confirm that some of these reports are true. On or before January 15th, 2016 an unknown person accessed and retrieved what appears to be a SQL dump of the site. How this happened is not known at this time, however we are taking every possible step to both determine how this happened as well as prevent it from happening in the future.

 

Information that we know that has been compromised includes username, IP address, email address and hashed passwords. Although the passwords are hashed and not stored as plain text passwords, we are still advising users to change their passwords to any services that may have shared the same or similar password with your account here on these forums.

 

As a further preventative measure we have began the process of invalidating all passwords currently being used, and you will need to use the password reset feature to update your password to something different. We apologize that this process could not be somewhat smoother, but we want to be sure that none of the compromised passwords remain within the database.

 

We greatly apologize for any inconvenience this has caused and hope that we can continue to provide a fun and safe place for everyone to learn, grow, and discuss all things modded minecraft related.

 

Thank you for your time, and again we apologize for this. If you need assistance, please email us at support[at]minecraftforge.net and someone will be available to help.

 

Please watch this thread for any updates, concerns, or comments.

[Gamebuster19901]

Were passwords hashed, or hashed and salted?