NuTSR Financial Data Breach

The ongoing saga of “TSR3” continues as Justin LaNasa, owner of “TSR LLC”, allegedly stores and has emailed to others a spreadsheet containing customer financial information stored without any form of encoding or encryption.

tsr3.jpg

In a video released by Don Semora of Wizard Tower Games, Semora claims Justin LaNasa emailed him a spreadsheet in May 2022 that included financial information from customers and business partners including full names, email addresses, home addresses, phone numbers, and even credit card numbers, all stored in plain text with no encoding or encryption. This includes customers of TSR or Dungeon Hobby Shop’s webstores purchasing products including Cult of Abaddon, Dungeon Crawl: The Board Game, TSR Dice, and others.


Screenshots of the spreadsheet (with private information redacted) show up in the video starting at the nine minute mark.

Wizard Tower Games also commented in the EN World thread “The Full & Glorious History of NuTSR” offering to confirm if anyone’s personal information was part of the spreadsheet he received. According to David Flor, transactions with the companies are processed under the name “Port City Kava”, an oxygen bar and vape/ecig store run by Justin LaNasa in North Carolina.

For those unfamiliar with the Saga of the TSR Trademark, EN World has a timeline of events with links to more information going back to the start in June of 2021 and, at the time of writing, updated through July 22, 2022.

The video from Semora is the most recent entry in a back-and-forth between himself and LaNasa following a Twitter post from Wizard Tower Games on August 29 confirming the company received two subpoenas related to the lawsuit with Wizards of the Coast. Michael K. Hovermale, former employee of TSR LLC, confirmed he also received a subpoena related to the lawsuit and confirmed in a post on EN World that he retained all information from his time working for LaNasa and informed LaNasa of this in June of 2022. In a video titled “OPEN LETTER LANASA” posted on September 1, Don Semora says he received a text message from LaNasa accusing Semora and Hovermale of “photoshopping documents”. The video consists of Semora posting screenshots of documents he claims were sent to him from LaNasa. In response, LaNasa claimed the documents in the video were Photoshopped by posting his own screenshots and calling Semora a "liar" on social media including in the title of a channel on the TSR Discord server, according to a screenshot from the private server posted by Kim Wincen. Semora responded with the video posted earlier today containing the spreadsheet along with other screenshots.

The trial between TSR LLC, the Dungeon Hobby Shop Museum LLC, and Justin LaNasa v. Wizards of the Coast is scheduled for a jury trial in October 2023.
 

log in or register to remove this ad

Darryl Mott

Darryl Mott

Rabulias

the Incomparably Shrewd and Clever
The $100M number may have been an exaggeration, but multiple sources have told me he expected to get at least six figures.
I think it was one of Don's videos (now made private) that showed the text exchange where LaNasa used the term "six figures," which is anywhere from $100,000 to $999,999, very far from $100 million.
 
Last edited:

log in or register to remove this ad

CleverNickName

Limit Break Dancing
NuTSR is kind of like some bizarre variant hydra with the following traits:

Shoot Foot. As a bonus action, the NuTSR hydra can shoot one of its own feet.

Multiple Feet. The NuTSR hydra has multiple feet. Each turn it needs to roll an Integrity saving throw to avoid tripping over its own feet, landing prone on a failure. If the NuTSR hydra has any active sock puppets (see below), this saving throw is at disadvantage.

Regrow Feet. At the end of its turn, it grows two feet for each foot that was shot off since its last turn. If the NuTSR hydra is subjected to the social media silence spell, this trait does not function.

Sock Puppet. As an action, the NuTSR hydra can create a sock puppet for each active foot that it has.
That's a lot of clown shoes.
 

darjr

I crit!
Fundamentally, what I expect to see happen is that WotC will steamroll these child-cartoon-villains, and will henceforth rabidly protect the TSR name, while at the same time not making it a core product people will constantly google (dragging up this embarrassing episode in perpetuity). I don't know what that will look like, but the cheeky part of my brain imagines a yearly publication that they sell exclusively in a store in Hasbro HQ (past a point where you have to badge-in to access) for $1.00 that is nothing but a list of other words and phrases they want to keep legal control over (such as Star Frontiers). Or something of that nature -- nothing vital to a business interest but which protects them from future headaches like this.
WotC has already done this with the license. But with a quality product and not some garbage thing. The book Art and Arcana is the prime example. The Goodman Games OAR books is another.

Also the compiled previous edition adventures is another, though I’m not sure those contain company logos.

Finally everything from older editions available on DMsGuild, some in print.
 

darjr

I crit!
I think it was one of Don's videos (now made private) that showed the text exchange where LaNasa used the term "six figures," which is anywhere from $100,000 to $999,999, very far from $100 million.
He also said 100m in one of those message exchanges. But I think it was just Lesser Lanasian striking again.
 

I think there might be some misunderstandings about what's going on.

Justin LaNasa registered the name "TSR" along with some associated logos as trademarks for his company, TSR LLC, along with a registration for the name "Star Frontiers". He does claim ownership of the name "TSR" as he attempted to get Jayson Elliot to license the name back from him for his company also called TSR (now called Solarian Games).

Wizards of the Coast currently uses the trademarks "TSR", "Star Frontiers", and many others along with the graphic logos that Justin LaNasa registered as they sell reprints of classic TSR-era modules and the original Star Frontiers game on DMs Guild and/or DriveThruRPG. Star Frontiers in particular came up when Evil Hat games also attempted to register the trademark but, after talking with Wizards of the Coast, backed down. It was then that Wizards put the original Star Frontiers for sale on DMs Guild.

When LaNasa filed for the trademarks, Wizards of the Coast filed an objection to their registration before it was finalized. LaNasa sued Wizards of the Coast for the right to use the trademarks, then Wizards of the Coast counter-sued for LaNasa violating their trademarks. The trial will determine who owns the trademarks and how much (if any) damages the other party will have to pay.

It should be noted that, under United States law, you do not need to register a trademark for it to be legally protected, but registering the trademark does give you more legal protections than if you do not. Just because Wizards of the Coast allowed the registration to lapse does not mean that they "lost" the trademark as other things have to occur for that to happen. And that's what the court will decide.
I don't think anyone was not aware of this, or confused about anything. This all started because the lapsed registration made LaNasa think he could acquire and then squat on the name TSR and make WotC pay him to go away. I think WotC will make flagrantly clear that this line of attack didn't, and will never, work.
WotC has already done this with the license. But with a quality product and not some garbage thing. The book Art and Arcana is the prime example. The Goodman Games OAR books is another.

Also the compiled previous edition adventures is another, though I’m not sure those contain company logos.

Finally everything from older editions available on DMsGuild, some in print.
Indeed. It's really unclear if LaNasa and company didn't know about the DMsG reprints (unlikely, since they also complained about the disclaimers on DMsG products), didn't make the connection, or didn't think that re-issues of old products counted as keeping trademarked IP in commercial use.
 

DLIMedia

David Flor, Darklight Interactive
I don't think anyone was not aware of this, or confused about anything. This all started because the lapsed registration made LaNasa think he could acquire and then squat on the name TSR and make WotC pay him to go away. I think WotC will make flagrantly clear that this line of attack didn't, and will never, work.
I'm really hoping WotC to do what Disney commonly does and make an example of Justin. Destroy him so thoroughly that no one would ever dream of coming anywhere near their trademarks ever again.
 

Ancalagon

Dusty Dragon
I think it was one of Don's videos (now made private) that showed the text exchange where LaNasa used the term "six figures," which is anywhere from $100,000 to $999,999, very far from $100 million.
We know LaNasa is not good with grammar - perhaps he's not familiar with the concept of "orders of magnitudes" either? (... and to be fair, that's something that is frequently misunderstood).
 



pantsorama

Explorer
I don't think anyone said the FTC regulates it; we've been talking about how if they aren't, they lose their ability to use that service (i.e., MC and Visa mandate it). So when you quoted me saying it's not required, it threw me off because I was talking about from MC/Visa, not FTC. I was only talking about FTC in the context of how he's handling the breach.
Right. While contractually required is not legally required it stills falls under the category of, you know, required.
 



Ancalagon

Dusty Dragon
I don't know what point you're trying to make, but in case you haven't noticed, a lot of this stuff is not online anymore because the lawyers got involved.
I'm not "trying to make a point". I'm trying to get you to elaborate. You said, 2 days ago now:

Tomorrow is going to be interesting...I almost feel sorry for Justin's lawyers.

Almost.

This implied that you knew something big was coming. I was just trying to get an update on what that "big thing" was and if it happened or not.
 

Abstruse

Legend
I'm not "trying to make a point". I'm trying to get you to elaborate. You said, 2 days ago now:



This implied that you knew something big was coming. I was just trying to get an update on what that "big thing" was and if it happened or not.
If I knew for sure that something would happen, I would have written an article about it. I've got no reason to be coy about this sort of thing. What I know is that Monday was a holiday in the United States, meaning that the agencies that handle investigations of financial data breaches and leaks are closed. As are the majority of legal firms. Meaning the consequences for what happened over the weekend would start at that time. Which we've already seen as Don Semora has taken down his original videos.
 

Stormonu

Legend
NuTSR is kind of like some bizarre variant hydra with the following traits:

Shoot Foot. As a bonus action, the NuTSR hydra can shoot one of its own feet.

Multiple Feet. The NuTSR hydra has multiple feet. Each turn it needs to roll an Integrity saving throw to avoid tripping over its own feet, landing prone on a failure. If the NuTSR hydra has any active sock puppets (see below), this saving throw is at disadvantage.

Regrow Feet. At the end of its turn, it grows two feet for each foot that was shot off since its last turn. If the NuTSR hydra is subjected to the social media silence spell, this trait does not function.

Sock Puppet. As an action, the NuTSR hydra can create a sock puppet for each active foot that it has.
I am reminded of this Order of the Stick Comic
 




Michael Linke

Adventurer
I don't think anyone was not aware of this, or confused about anything. This all started because the lapsed registration made LaNasa think he could acquire and then squat on the name TSR and make WotC pay him to go away. I think WotC will make flagrantly clear that this line of attack didn't, and will never, work.

Indeed. It's really unclear if LaNasa and company didn't know about the DMsG reprints (unlikely, since they also complained about the disclaimers on DMsG products), didn't make the connection, or didn't think that re-issues of old products counted as keeping trademarked IP in commercial use.
I thought I read in one of the complaints that he believed that when WotC put Star Frontiers for sale on DMs guild, they had somehow inadvertently confirmed that TSR (which in his mind is the same company he owns) was the actual owner of Star Frontiers, and the he/TSR is therefor actively selling Star Frontiers without contest from WotC.

Edit: as far as I can tell, there was a change to the PCI DSS standard at some point. While at one time, storing encrypted values was considered compliant, the current standard have you storing nothing, encrypted or otherwise. It’s very possible he just has older software that stores the encrypted values.
 
Last edited:

Abstruse

Legend
I thought I read in one of the complaints that he believed that when WotC put Star Frontiers for sale on DMs guild, they had somehow inadvertently confirmed that TSR (which in his mind is the same company he owns) was the actual owner of Star Frontiers, and the he/TSR is therefor actively selling Star Frontiers without contest from WotC.
I'm not saying LaNasa didn't claim that (he's said so much random crap it's impossible to keep track), but the original Star Frontiers went on sale in DMs Guild in 2017 back when Evil Hat did all this the right way (they registered the trademark, contacted Wizards of the Coast to make sure the trademark was intentionally abandoned, was told it was not, Evil Hat withdrew their registration, and Wizards of the Coast put up the Star Frontiers products as part of their legacy line to reaffirm their hold on the trademark). So this was way back when LaNasa too busy with his grits wrestling league to mess with the TTRPG industry.
 

Related Articles

Visit Our Sponsor

An Advertisement

Advertisement4

Top