Has the site been hacked?
Discussion
www.hackforums.net/showthread.php?tid=1575852
If so you guys need to mail EVERYONE RIGHT NOW to tell them to change their passwords ASAP.
If so you guys need to mail EVERYONE RIGHT NOW to tell them to change their passwords ASAP.
Stuart said:
Sorry, the was PH hacked thread was deleted by a mod until they could get hold of us.
We're going to be able to understand what caused the outage yesterday during this morning. We were made aware yesterday of some potential vulnerabilities in some older sections of our code, and so took the precaution of treating yesterday's outage as a hack, and addressing these vulnerabilities before we put the site back live. That's the reason why it took so long, simply because we wanted to be certain that we had caught everything.
The post on the hacker forum appears to be a certain amount of showing off by someone unconnected to the individual who highlighted these issues to us, and in fact had been taken down from that forum before we even made this individual aware of its existence. What you can see is in Google's cache, it isn't live and hasn't been for almost 24 hours.
We're currently scrutinising the logs to understand exactly what happened, and to satisfy ourselves of the extent of any possible data loss, if indeed such a loss took place. Once we've done this we'll make a further statement here on the PH forum.
However what I can say is that we take our data storage responsibilities seriously; passwords are stored in a fully encrypted state and any transactions with users (our shop or our classified ads) are handled by Worldpay off site, with all the appropriate levels of security one would expect. In the unlikely event that customer data was taken, we do not see that it represents a risk to users.
For the time being please let us understand further what took place yesterday, and I'll respond here further in due course.
We're going to be able to understand what caused the outage yesterday during this morning. We were made aware yesterday of some potential vulnerabilities in some older sections of our code, and so took the precaution of treating yesterday's outage as a hack, and addressing these vulnerabilities before we put the site back live. That's the reason why it took so long, simply because we wanted to be certain that we had caught everything.
The post on the hacker forum appears to be a certain amount of showing off by someone unconnected to the individual who highlighted these issues to us, and in fact had been taken down from that forum before we even made this individual aware of its existence. What you can see is in Google's cache, it isn't live and hasn't been for almost 24 hours.
We're currently scrutinising the logs to understand exactly what happened, and to satisfy ourselves of the extent of any possible data loss, if indeed such a loss took place. Once we've done this we'll make a further statement here on the PH forum.
However what I can say is that we take our data storage responsibilities seriously; passwords are stored in a fully encrypted state and any transactions with users (our shop or our classified ads) are handled by Worldpay off site, with all the appropriate levels of security one would expect. In the unlikely event that customer data was taken, we do not see that it represents a risk to users.
For the time being please let us understand further what took place yesterday, and I'll respond here further in due course.
Mini1275 said:
Apparently you need to be logged in to view that thread.
What is it saying?.
Not sure, I can only see what google report in their search results, cannot get on the forum due to work firewallWhat is it saying?.
"PistonHeads HACKED - www.PistonHeads.com Owned FULL DB Dumped ...
www.hackforums.net/showthread.php?tid=1575852 - Cached
3 days ago – Website and Forum Hacking-PistonHeads HACKED - www.PistonHeads.com Owned FULL DB Dumped."
Gassing Station | Website Feedback | Top of Page | What's New | My Stuff