One Bookshelf hacked "no evidence that any customer account data was compromised"

[Eyes of Nine]

Regardless of headline, probably best practice to update DriveThru and DMs Guild passwords.

 

[jdrakeh]

Thanks for the heads up!

 

[schneeland]

Not a great thing. But thanks for the hint!

 

[Helldritch]

Thanks a lot for the warning.
Passwords changed.

 

[scourge]

Many thanks for the heads up.

 

[Guest 7034872]

"no evidence that any customer account data was compromised"​

Righhhht...have they any evidence that it wasn't? If not, I'd still be nervous as a customer.

 

[Morrus]

Righhhht...have they any evidence that it wasn't?

You can't prove a negative, of course.

 

[Guest 7034872]

You can't prove a negative, of course.

It's very hard to do and in this sort of scenario, yeah--impossible. That's why I'd be so nervous, especially in light of the ongoing arms race between hackers and security companies.

 

[Morrus]

It's very hard to do and in this sort of scenario, yeah--impossible. That's why I'd be so nervous, especially in light of the ongoing arms race between hackers and security companies.

Sure, feel free to be nervous. I'm just pointing out that your question is logically impossible to answer. There's also no evidence that EN World or your bank or your personal computer wasn't.

 

[Guest 7034872]

Sure, feel free to be nervous. I'm just pointing out that your question is logically impossible to answer.

Is it? My question was about evidence, not all-out proof.

 

[Morrus]

Is it? My question was about evidence, not all-out proof.

OK. Debating logic has exceeded my interest level. I'm outta here!

 

[Nikosandros]

Coincidentally, I was completing an order yesterday and I did notice the price of an item suddenly going to zero and the site going down almost immediately afterwards.

 

[Alzrius]

Coincidentally, I was completing an order yesterday and I did notice the price of an item suddenly going to zero and the site going down almost immediately afterwards.

That was no coincidence; it was what the hackers were after.


EDIT: Hm, for some reason the OP's link to the blog isn't showing up when I look at this thread in Firefox, so I didn't realize that had already been posted here. I've made a thread over in Meta reporting the issue.

 

[Nikosandros]

That was no coincidence; it was what the hackers were after.

Yes, I know. I read the message form DTRPG. The coincidence was that I was completing an order just when a price change happened and then the subsequent taking down of the site.

 

[kenada]

Even though they say no customer account data was customized, I still went and changed my password, and I’m glad I hadn’t saved my credit card information.

 

[darjr]

OneBookShelf, DMsGuild security breach update.

In dealing with this security breach, we learned that the hack was instigated by a “white-hat” hacker who had not followed proper protocols. Details The hacker found a PDO buffer overflow vulnerability that caused a SQL query to be truncated in a way that altered the price of all titles...

www.enworld.org