News

View on forums

We've been hacked

Posted by Matty, 8 years ago.

We've been hacked. Someone managed to get a database and/or admin acocunt password.

This means that you may want to change your password. They are hashed and salted with bcrypt, so it's not easy to get the plaintext password from it. But they can use it to login on your account here.
If you use the password from this site on other sites, be sure to change it there as well (and don't use duplicate passwords anymore

Comments

Comment posted by Cireon, 8 years ago.

We are currently in the process of restoring a backup of the General Discussions forum as well.

EDIT: there are some difficulties in restoring the backup and the General Discussions forum will be unavailable for the time being.
Comment posted by Madagascarter, 8 years ago.

Is this why one of my games on Ancient Realm mysteriously disappeared. It isn't in the finished games either.
Comment posted by Hoodlum, 8 years ago.

no. game 691383 was a separate issue causing a bug during the time the hacking was taking place.. The timer was stuck, and I was receiving notifications, where it was just better to force an end to the game, while programmers were offline, and that other things could be dealt with.
Comment posted by momagajic, 8 years ago.

And whats missing
Comment posted by Matty, 8 years ago.

The general discussions thread.
We have a backup from 2 weeks ago, but there's an issue with read/write access, so it's hard to restore just that thread, without deleting everything else.
Comment posted by momagajic, 8 years ago.

Thats wierd ,so what next?general thread is important
Comment posted by Cireon, 8 years ago.

We are working with the hosting provider on restoring it as soon as possible.
Comment posted by Cireon, 8 years ago.

Good news: the General Discussions forum is mostly back. The backup is a few weeks old so some of the newest posts are missing. There is sadly nothing we can do to get those back. Also, it has not saved whether the threads were unread/read, so you will have to mark the entire forum as read again.

Sorry for the inconvenience. Happy risking!
Comment posted by Fendi, 8 years ago.

Everyone please thank Cireon for his work, this would not have been possible without him. And Matty for taking care of the database and the admins for handling this it so well.
Comment posted by Cireon, 8 years ago.

Me last week:
Comment posted by Hoodlum, 8 years ago.

Thanks team, appreciate your efforts
Comment posted by momagajic, 8 years ago.

Nice to hear good news,thanks Cireon and other staff.
Comment posted by elysium5, 8 years ago.

Thanks, you guys!
Comment posted by Madagascarter, 8 years ago.

It's back! Thanks guys.
Comment posted by aeronautic, 8 years ago.

Nice one Cireon... damn hackers!
Comment posted by Madagascarter, 7 years ago.

Seriously people change your passwords on anything you have used that email for. I just realised that my spam email account, (account for anything not important) has been hacked and used to send inappropriate pictures. Luckily I had no money or anything on my email so no real harm done. The only link I could link it to though was the password database hack here so yeah, don't think it won't happen to you.
Comment posted by Matty, 7 years ago.

We may have leaked what your email was, but not what the password for your email was, so this hack could not give a hacker access to your email address (unless you told your password in a message, chat of forum on d12 or something - NEVER enter your passwords anywhere).

Even if you used your password of that email address on this site (note: reusing passwords is bad practice, don't do that), this site's hack will probably not be the leak of it, as we don't store your password for d12 - only a salted hash (with bcrypt, that's a good hash for passwords). It's extremely hard to get your original password from there.

Many services on the internet get hacked these days, skype, linkedin, windows live mail/hotmail (all the time), equifax. And not all of them tell you about it (or if they do, sometimes years after the incident).

The best defence against this is to use strong passwords and not reuse them on other sites (in order to remember these passwords, use a password manager).
Comment posted by dough_boy, 7 years ago.

Could also be that you were using a password that has been "cracked" and that matches up against a hash table.
Comment posted by Madagascarter, 7 years ago.

Right, It was the only link I could think of so I guess I was just unlucky that this random hacker choose my spam account. I rarely go on it, I only went on it to get my early access link for the Fifa app and that is the only reason why I noticed it. I guess I've used this email and my password for a lot of sites which I might have only went on once just to try and find material and I've never told anyone my password except for direct family members and it's definitely not them so. I think I've got them out now. Is there an easy way to change my email on this site to a new one?
Comment posted by Matty, 7 years ago.

Go to the settings, right here: https://dominating12.com/account/accountinfo
Comment posted by dough_boy, 7 years ago.

Madagascarter
...I was just unlucky that this random hacker choose my spam account...
Usually the data is sold or given away on the black market so it is highly likely your account was not used by the hacker and instead someone else.
Comment posted by johnnybto, 7 years ago.

thanks team for the awesome job you do ALL the time in dealing with issues and whatnot, it is greatly appreciated.