Topic: simpleportal.net got hacked

[Ken (OP)]

... Mick posted this over on TP and I thought that we could use it here as well.

Security Breach on Community Forums

Dear SimplePortal community members,

On 17 June 2016, we discovered that unauthorized access to our website and database had been obtained on 16 June 2016. We determined that the unauthorized access has been obtained using stolen credentials of a high-level user.

For this reason, we would like you to change your passwords for this website and we strongly advise you to change your passwords on any other website where you may have been using the same passwords.
... read more on the SP site.

[Skhilled]

Thanks, just changed my password...

[Ken (OP)]

Thanks, just changed my password...

Me 2!

[Ken (OP)]

Illori suggested Administration Center Security as a good idea, that mod sounds good to me.

[Skhilled]

I've never heard of that mod, but then again, I don't go there much. I'll give it a shot as well as his theme. It's a dark theme, which I rarely use but it looks great and has nice features!

Apocalypse theme

[Ken (OP)]

Nice looking theme... where's the dl link? Could not find it in the topic.

NM... found it, it's in the themes block now.
It is rather dark for my taste, but it looks good. Kind of vaguely reminds me of Bloc's old Helios theme. 

[Skhilled]

Yes, it does look like that theme.

Did you add all of the patches? I've downloaded everything but have not installed it yet.

[Ken (OP)]

Yes, it does look like that theme.

Did you add all of the patches? I've downloaded everything but have not installed it yet.

No... maybe I should do so.

[Ken (OP)]

Just in... Finally received an email notice from SP about this breach.

[Skhilled]

I was wondering why I never got one...

[Mick]

I was wondering why I never got one...

I didn't get one either.   

[Ken (OP)]

Here is the text from their email:

Dear SimplePortal community members,

On 17 June 2016, we discovered that unauthorized access to our website and database had been obtained on 16 June 2016. We determined that the unauthorized access has been obtained using stolen credentials of a high-level user.

We would like to make it clear that your personal SimplePortal installations were not affected in any way by this. We would like to assure you that your installations running the latest versions of SimplePortal and SMF should be safe. The unauthorized access was restricted to just our website.

The hacker attempted to download our database, but as of yet we are not certain that it was successful. Regardless, it's possible that your usernames, emails and hashed passwords have been retrieved by the attacker.

For this reason, we would like you to change your passwords for this website and we strongly advise you to change your passwords on any other website where you may have been using the same passwords.  Using unique passwords on all websites is very important to prevent such attacks. Note that, if you had shared passwords using personal messaging system, they can no longer be considered safe and needs to be changed as well.

To ensure the safety of our website, we have updated all the relevant credentials and rebuilt our installation from the ground up. We will implement stricter security policies in the coming days to make sure that such an unfortunate event does not happen again.

We are truly sorry for what happened and we deeply apologize for the inconvenience this has caused. We hope that you will continue to support us to make SimplePortal a better portal solution for your forums.

-The SimplePortal Team