TWC Hacking

**TinCow** · 06-26-2011, 13:59

FYI, TWC was hacked recently. This notice has been posted there:

A hacker attacked TWC a little while ago and obtained a copy of our password database. We do not believe that he intends to publish it publicly or otherwise abuse it, but members should be aware that their passwords might have been compromised.

If you use the same password on TWC and an important site, like your e-mail or Amazon or a bank account, immediately change the password on the other site. Never use the same password on a casual, unsecured site like TWC and a site that stores important information like credit card numbers. Sites like TWC are much easier to hack, and hackers often try to reuse account info to take over accounts on banks or e-commerce sites so they can steal money. If you use different passwords, attackers who hack TWC will only be able to take over your TWC account, which is unprofitable and therefore unlikely.

We do not believe members (other than admins) need to change their passwords on TWC itself, since the risk of attack is low and we can restore compromised accounts to their rightful owners after the fact.

We apologize for the security breach, and will try to take steps to prevent such incidents in the future.

Hexagon Council

If you have an account on TWC and use the same password as you do on the Org, it would be a good idea to change your Org password now. If you use the same login/pass combination on other sites, particularly places where you have actual monetary value (i.e. Steam, online banking, Amazon, etc.), password changes there would be a good idea as well.

**Populus Romanus** · 06-26-2011, 21:38

Is there any risk that this could happen at the .Org as well?

**TinCow** · 06-26-2011, 22:51

Originally Posted by Populus Romanus

Is there any risk that this could happen at the .Org as well?

Not by the same method. The hacker gained access to TWC via a loophole in a script that we do not use.

**Beskar** · 06-26-2011, 23:15

Lulzsecurity struck again?

First Sony, then the CIA and all these others... in practice against the Arch-Enemy of the Internet, TWC.

dun Dun DUN!