Epic Games Forums Hacked; Over 800,000 Passwords Stolen

[btarunr]

The official discussion board for Epic Games, frequented by developers and gamers of Unreal Engine, "Unreal Tournament," and soon "Paragon," was hacked, exposing dates of birth, IP addresses, registration dates, registration e-mail addresses, and allegedly passwords, of over 800,000 users, reports The Hacker News. The hackers reportedly got their hands on the data by exploiting a vulnerability in the outdated version of vBulletin that Epic Games uses.

Epic Games, however, denies that the hackers got their hands on passwords. "We believe a recent Unreal Engine and Unreal Tournament forum compromise revealed email addresses and other data entered into the forums, but no passwords in any form, neither salted, hashed, nor plaintext," the company stated. ZDNet reports that a larger portion of the vBulletin database, which includes user posts and private-messages, could also have been stolen.



View at TechPowerUp Main Site

 

[Solaris17]

ouch

 

[ZoneDymo]

Epic Hack yo

 

[OneMoar]

yikes
shit just hit the fan

 

[MagnuTron]

*puts on tin foil hat*

It was MS! Punishing Tim Sweeney for his "outrageous" claims.

 

[TheDeeGee]

I'm glad my Fortnite Account is still safe... for now

 

[Esse]

Funcoms vBulletin forum got hacked too.

 

[Prima.Vera]

Shmit happens. As long as no credit card info was stolen or similar, no need to blow things out of proportion.

 

[CounterZeus]

they are saying no pw were hacked, so I wonder what really happened. I was only active on the old archived forums (UC2 era) and I don't use passwords from that time anyway

 

[alucasa]

vbulletin is dead. They've got to get rid of that shit.

 

[dorsetknob]

yikes
shit just hit the fan

No the Shit hit the Fan on Monday and tuesday when it was widely reported

 

[silentbogo]

I guess I got lucky to register for Paragon on Aug 23rd.

 

[BiggieShady]

they are saying no pw were hacked, so I wonder what really happened.

What they are really saying is : they stole the user database but we don't store passwords, we store password hashes ... emails will be added to all global spam lists though.

 

[cool_recep]

This is what happens when you use vBulletin... Should have switched to Xenforo long ago. GG

 

[Jism]

I've used to crack vbulletin forum boards, it's pretty easy, and when you get your hands on that Database you'll get your hands on anything, so also including salted passwords and all.

V-bulletin is more advanced compared to other forum software, and they actually salt their passwords making it harder to crack compared to MD5 (which is obsolete these days).

If a hacker has access to alot of GPU's it might be possible to unsalt those passwords and get a nice 800.000 looking list of user passwords, which in combine can be used with different accounts such as email or facebook.

Please, never have one and the same password for all your things on the net.

 

[AsRock]

This is why we should be able delete our own on here. which how do you delete them ?, you can leave the conversation but does that really delete them ?, or just from your view.

 

[64K]

This is why we should be able delete our own on here. which how do you delete them ?, you can leave the conversation but does that really delete them ?, or just from your view.

You can't delete anything posted on the internet.

 

[AsRock]

You can't delete anything posted on the internet.

Ooh stop taking shit out of context.

 

[64K]

This is why we should be able delete our own on here. which how do you delete them ?, you can leave the conversation but does that really delete them ?, or just from your view.

You can't delete anything posted on the internet.

Google is watching and recording.

 

[AsRock]

You can't delete anything posted on the internet.

Google is watching and recording.

But at least THIS forum should allow you to delete private conversations but i believe they stay unless the other person(s) delete the convo too., not talking about google or who ever. On about if TPU had it's database stolen.

I always delete mine, as every little bit helps,

 

[64K]

But at least THIS forum should allow you to delete private conversations but i believe they stay unless the other person(s) delete the convo too., not talking about google or who ever. On about if TPU had it's database stolen.

No, you can't delete anything you post/PM on the internet with assured privacy at all. The Department of Homeland Security doesn't need a court order to snoop on your internet usage anymore. That went bye-bye in the Bush era.

 

[AsRock]

No, you can't delete anything you post/PM on the internet with assured privacy at all. The Department of Homeland Security doesn't need a court order to snoop on your internet usage anymore. That went bye-bye in the Bush era.

O stop already, it's not them that bother me or any part of the government.

 

[64K]

O stop already, it's not them that bother me or any part of the government.

The government is your friend.

They're here to help you.

 

[Thimblewad]

I'm a pirate and I don't get this stuff because no multiplayer, hahahahah