Town of Salem, a popular online multiplayer game developed by BlankMediaGames (BMG), suffered a severe server compromise between late December 2018 and early January 2019. Cybercriminals exploited vulnerabilities in the game’s forum PHP software and server configuration, gaining unauthorized access to the central user database.
If you'd like to dive deeper into protecting your online presence, I can help you with: recommendations Setting up Two-Factor Authentication Identifying phishing red flags Which of these security steps
They provided updates on the extent of the data compromised, though some critics felt the "phpass" hashing method was outdated for a database of that size. 🛡️ How to Protect Your Account Post-Breach town of salem data breach pastebin
In late 2018 and early 2019, players of the popular online strategy game Town of Salem woke up to a digital nightmare. BlankMediaGames, the indie developer behind the hit browser and mobile game, had suffered a massive data breach. Soon after, the stolen data found its way onto Pastebin and various hacker forums, exposing the personal information of over 7.6 million players.
The breach was first brought to public attention by the breach notification service Have I Been Pwned. Investigations revealed that the attackers gained access to the game’s servers through a compromised administrative account. This allowed them to exfiltrate a database containing a wealth of sensitive user information. The stolen data included: Usernames and email addresses. Hashed passwords (using the phpass framework). IP addresses. Game activity logs and purchase history. Forum posts and private messages. Town of Salem, a popular online multiplayer game
If any of these services alert you, assume that your username, email, and (hashed) password are still circulating somewhere on the internet, possibly still on a forgotten Pastebin page.
Do you need help to prevent this in the future? 🛡️ How to Protect Your Account Post-Breach In
The immediate aftermath of the leak was marked by confusion and frustration within the Town of Salem community. BlankMediaGames initially faced criticism for a perceived delay in acknowledging the breach and forcing a global password reset.