One Bookshelf hacked "no evidence that any customer account data was compromised"

[Morrus]

Is it? My question was about evidence, not all-out proof.

OK. Debating logic has exceeded my interest level. I'm outta here!

 

[Nikosandros]

Coincidentally, I was completing an order yesterday and I did notice the price of an item suddenly going to zero and the site going down almost immediately afterwards.

 

[Alzrius]

Coincidentally, I was completing an order yesterday and I did notice the price of an item suddenly going to zero and the site going down almost immediately afterwards.

That was no coincidence; it was what the hackers were after.


EDIT: Hm, for some reason the OP's link to the blog isn't showing up when I look at this thread in Firefox, so I didn't realize that had already been posted here. I've made a thread over in Meta reporting the issue.

 

[Nikosandros]

That was no coincidence; it was what the hackers were after.

Yes, I know. I read the message form DTRPG. The coincidence was that I was completing an order just when a price change happened and then the subsequent taking down of the site.

 

[kenada]

Even though they say no customer account data was customized, I still went and changed my password, and I’m glad I hadn’t saved my credit card information.

 

[darjr]

OneBookShelf, DMsGuild security breach update.

In dealing with this security breach, we learned that the hack was instigated by a “white-hat” hacker who had not followed proper protocols. Details The hacker found a PDO buffer overflow vulnerability that caused a SQL query to be truncated in a way that altered the price of all titles...

www.enworld.org