Site been hacked?

woody1144

Member
Messages
110
Hi all,

I work for a large global IT firm and received an email today from the internal security team saying that my username, email and password may have been compromised from specifically sportsmaserati.co.uk. It's not phising on anything, they do regularly check for matches of company emails being pwned and advise us to change passwords etc. I just wanted to check if there is anything that might have happened recently with the forum? Don't want to alarm anyone but also want to check this is a false alarm.
 

CatmanV2

Member
Messages
48,806
Just checked all mine, and nothing is saying that my user / pass is in teh wild.

How does they know it was specific from SM? Do you have a specific email registered?

C
 

CatmanV2

Member
Messages
48,806
Hmmm, actually I say that, turns out the unique address I use appears to have been included in Cit0day data.

(Although that in no way indicates that the password was included, I know @Conearo keeps a very tight lid on things)

C
 

woody1144

Member
Messages
110
Yeh I thought it might have been Cit0day as well and the security team had got hold of the dump and were checking for employees impacted. No idea though. It's odd as the email specifically mentioned sportsmaserati. It was .co.uk rather than .com though. Just wanted to see if anyone had heard anything. Sounds like we should be fine then. It could have been that the email and password combo was hashed but it just told me to make sure I change all my passwords so I have like a diligent employee haha.
 

woody1144

Member
Messages
110
Just checked all mine, and nothing is saying that my user / pass is in teh wild.

How does they know it was specific from SM? Do you have a specific email registered?

C
Yeh my email address is linked to my account. I log in with my username and password but there is a registered email as well.
 

conaero

Forum Owner
Messages
34,632
Passwords are hashed out and in real world terms, nobody has reported strangers logging in as them and we as regular users would have noticed it.

Regarding our servers, they are secure hosted in the UK and MySQL and Remote Desktop is locked down to 3 static IP addresses. Ontop of all of that are the usual security measures.

I will, as every add it to our mods meeting at the weekend and take advise on it from our server host.
 

Goodfella

Member
Messages
735
Surely because of, not despite?
5739661-B-215-A-4309-9653-6747876-CBD25.jpg
 

woody1144

Member
Messages
110
Passwords are hashed out and in real world terms, nobody has reported strangers logging in as them and we as regular users would have noticed it.

Regarding our servers, they are secure hosted in the UK and MySQL and Remote Desktop is locked down to 3 static IP addresses. Ontop of all of that are the usual security measures.

I will, as every add it to our mods meeting at the weekend and take advise on it from our server host.

Yeh didn't want to alarm or anything but just found it very odd they specifically mentioned the site. We often get lots of these as "tests" to make sure as employees we aren't so moronic to download anything and everything but this one was different.

Glad to hear no reports or odd activity though, thanks for checking!
 

midlifecrisis

Member
Messages
16,238
Yeh didn't want to alarm or anything but just found it very odd they specifically mentioned the site. We often get lots of these as "tests" to make sure as employees we aren't so moronic to download anything and everything but this one was different.

Glad to hear no reports or odd activity though, thanks for checking!
Maybe yout IT team noticed that you're spending too much time on SM...