Getting emails about aarinfantasy.com being hacked

[raykai]

Hi I'm getting emails about aarinfantasy.com being hacked .... aarinfantasy profile is also saying ''Status
is Breached by twitter @i0day'' ... Email are coming from staff@aarinfantasy.com sayig

#Kushsecurity *
Site database breach*ed/dumped by @i0day (*Twitter) Skype live:l*eakeddatabase


Database will be lea*ked 

Database contains: u*sername,password,emai*l,birthday,salt,ipadd*ress


Want to contact us #*Kushsecurity?
Skype: live:leakedda*tabase
Twitter: @i0day*

Don't know why it's posting it with stars as there is none in the email...

[lemur7]

I've messaged Aarin about this(off forum)...hoping to find out just what is going on here....

[AlexiaLee]

@Dai-kun; @Twinstar; @Aarinfantasy;

[Twinstar]

Dai is aware and working on it...

[Dai-kun]

Orangewillow's account (inactive admin) was compromised and from there was able to access the admin control panel and logged into aarin's account. I've took measures to protect all the admin's account and removed orangewillow's admin status.

Now I'm backtracking to see what that loser did and fixing it.

[Schneider]

Glad you guys managed to get it back. Although all login data seems to have been compromised. I think this might be a good lesson to remove all inactive staff members and periodically review accounts status of active staff. There are few people on that list I have not seen in forum since years or ever.

[bronakopdin]

it's good to know that the active staff got back controll but maybe if emails and passwords were stolen there should be an actual announcement to all members to better change their passwords?

I'm gonna change mine for now just to be safe

[Twinstar]

Glad you guys managed to get it back. Although all login data seems to have been compromised. I think this might be a good lesson to remove all inactive staff members and periodically review accounts status of active staff. There are few people on that list I have not seen in forum since years or ever.

I did that now. Most already had their mod status already removed, it was only the title showing.

[lemur7]

thank-you mods and admins for such speedy work...I've changed my password as recommended ,,lord knows I should have switched it out years ago

[Araka]

Thank you for the quick fix Dai and others! Great job as always.
Seeing as all passwords are encrypted on the server, I doubt this guy did too much damage.
HOWEVER I do recommend everyone change their password anyway. Some are easy to figure out if you just brute force them.
But I'm wondering if it's the same guy that hacked Aarin's Twitter a couple of days ago. oO?