Our FamilyForum

Our FamilyForum Welcome Center => Chit Chat & Humor => Topic started by: Ken on June 21, 2016, 04:20:17 AM

Title: simpleportal.net got hacked
Post by: Ken on June 21, 2016, 04:20:17 AM
... Mick posted this over on TP and I thought that we could use it here as well.

Security Breach on Community Forums (http://simpleportal.net/index.php?topic=14355.0)

Quote
Dear SimplePortal community members,

On 17 June 2016, we discovered that unauthorized access to our website and database had been obtained on 16 June 2016. We determined that the unauthorized access has been obtained using stolen credentials of a high-level user.

For this reason, we would like you to change your passwords for this website and we strongly advise you to change your passwords on any other website where you may have been using the same passwords.
... read more on the SP site.
Title: Re: simpleportal.net got hacked
Post by: Skhilled on June 21, 2016, 08:21:57 AM
Thanks, just changed my password...
Title: Re: simpleportal.net got hacked
Post by: Ken on June 21, 2016, 09:28:18 AM
Thanks, just changed my password...

Me 2!
Title: Re: simpleportal.net got hacked
Post by: Ken on June 21, 2016, 09:56:25 AM
Illori suggested Administration Center Security (http://custom.simplemachines.org/mods/index.php?mod=3919) as a good idea, that mod sounds good to me.
Title: Re: simpleportal.net got hacked
Post by: Skhilled on June 22, 2016, 09:01:54 AM
I've never heard of that mod, but then again, I don't go there much. I'll give it a shot as well as his theme. It's a dark theme, which I rarely use but it looks great and has nice features!

Apocalypse theme (http://www.simplemachines.org/community/index.php?topic=524324.0)
Title: Re: simpleportal.net got hacked
Post by: Ken on June 22, 2016, 11:35:26 AM
Nice looking theme... where's the dl link? Could not find it in the topic.

NM... found it, it's in the themes block now.
It is rather dark for my taste, but it looks good. Kind of vaguely reminds me of Bloc's old Helios theme.  :azn:
Title: Re: simpleportal.net got hacked
Post by: Skhilled on June 23, 2016, 08:54:42 AM
Yes, it does look like that theme.

Did you add all of the patches? I've downloaded everything but have not installed it yet.
Title: Re: simpleportal.net got hacked
Post by: Ken on June 23, 2016, 10:13:21 AM
Yes, it does look like that theme.

Did you add all of the patches? I've downloaded everything but have not installed it yet.

No... maybe I should do so.
Title: Re: simpleportal.net got hacked
Post by: Ken on June 24, 2016, 02:47:22 AM
Just in... Finally received an email notice from SP about this breach.
Title: Re: simpleportal.net got hacked
Post by: Skhilled on June 24, 2016, 07:11:54 AM
I was wondering why I never got one...
Title: Re: simpleportal.net got hacked
Post by: Mick on June 24, 2016, 05:47:49 PM
I was wondering why I never got one...

I didn't get one either.   :(
Title: Re: simpleportal.net got hacked
Post by: Ken on June 24, 2016, 06:14:32 PM
Here is the text from their email:
Quote
Dear SimplePortal community members,

On 17 June 2016, we discovered that unauthorized access to our website and database had been obtained on 16 June 2016. We determined that the unauthorized access has been obtained using stolen credentials of a high-level user.

We would like to make it clear that your personal SimplePortal installations were not affected in any way by this. We would like to assure you that your installations running the latest versions of SimplePortal and SMF should be safe. The unauthorized access was restricted to just our website.

The hacker attempted to download our database, but as of yet we are not certain that it was successful. Regardless, it's possible that your usernames, emails and hashed passwords have been retrieved by the attacker.

For this reason, we would like you to change your passwords for this website and we strongly advise you to change your passwords on any other website where you may have been using the same passwords.  Using unique passwords on all websites is very important to prevent such attacks. Note that, if you had shared passwords using personal messaging system, they can no longer be considered safe and needs to be changed as well.

To ensure the safety of our website, we have updated all the relevant credentials and rebuilt our installation from the ground up. We will implement stricter security policies in the coming days to make sure that such an unfortunate event does not happen again.

We are truly sorry for what happened and we deeply apologize for the inconvenience this has caused. We hope that you will continue to support us to make SimplePortal a better portal solution for your forums.

-The SimplePortal Team