Security Concerns

[Dai-kun]

Many of you guys have received e-mails this morning regarding Aarinfantasy's leaked user database.

The database contains information containing your usernames, passwords (encrypted), IP addresses, e-mails, etc.

Even though the password is encrypted, it can be matched with existing decrypted passswords to figure out what your password is, especially if it's a weak password, like 'abc123' or 'password'.

I highly recommend that you change your password on aarinfantasy and any other sites with the same password.

The hackers accessed a vulnerability in the forum software, vBulletin, and was not patched in time. From there, they could start figuring out the passwords.

A couple of our admins had relatively weak passwords which the hackers were able to figure out and were able to log in and access the admin control panel to send out the e-mails. Fortunately, no serious loss of data occurred.

I've taken steps to prevent such an event from happening again and apologize for the inconvenience and trouble this may have cause you.

[aarinfantasy]

Thank you so much Dai, I was asleep when all this is happening.

For those who asked about my Twitter account, it's safe because it no longer has ties with the forum's email. Previously it was under the forum's email and that's why that got hacked too.

[Munemasa Katagiri]

I wonder what people like those have on their minds.

[RavenM]

Well if they tried to get mine... it went to a dead email account and thank god I had started to change all my passwords last week! Good luck guys...

[keikazama]

I appreciate all you do!
Thank you for the notification.

[Silverfang]

Thank you for the heads-up!

[charo]

@Dai-kun, thank you so much for fix on AF and the red sign virus warning is gone!

i changed my password for AF yesterday.
i am not sure about my log on Aarinfantasy is not secure for my computer.

see example
i enter AF website, it is not secure

i log in with new password, AF link is still not secure

for example, i go to other website such as Google, Hotmail, YouTube, all are "Secure"

i wonder if other AF members have same problem with log in AF for not secure?

[Dr. Muraki]

I have changed the passwords...but I do have a question...how would they find the my other websites with the same password? tracking the email?

[Dai-kun]

There are sites out there that stores multiple hacked databases which people can use to search for matching usernames/e-mails.

[vizard light]

Aww man I haven't been on till today.