Members Market security breach

[darael]

Just received the below message when visiting the forums this morning:

Due to a recent security breach with some user accounts, the Members Market has been temporarily hidden.
Hopefully should be available shortly.

Should we be changing our passwords? What was leaked and when?

 

[LiE]

https://forums.overclockers.co.uk/threads/where-has-the-mm-disappeared-to.18939405/

I would suggest enabling 2FA. I would also propose that 2FA is mandatory for MM access going forward.

 

[Josh]

I've changed mine to be on the safe side.

 

[darael]

https://forums.overclockers.co.uk/threads/where-has-the-mm-disappeared-to.18939405/

I would suggest enabling 2FA. I would also propose that 2FA is mandatory for MM access going forward.

I searched the forums for thread titles that had "members market" in them, but not "MM".

That's 2FA enabled for my OcUK account, but I don't remember seeing 2FA for trust.

 

[ThundyCat]

https://forums.overclockers.co.uk/threads/where-has-the-mm-disappeared-to.18939405/

I would suggest enabling 2FA. I would also propose that 2FA is mandatory for MM access going forward.

This is being actioned, all 3 accounts that got hacked DID NOT have 2FA enabled.

 

[Werewolf]

It doesn't look like the breach was at our end as the number of affected accounts was tiny, looking at the user logs there is a pattern that suggests the breach was elsewhere and someone used that information to get into the accounts, as TC says no 2FA which would likely have stopped it.

As soon as there was the suggestion of an issue with the forum we locked down MM and posted the message to try and be safe.

 

[RavenXXX2]

updated my account to 2fa yesterday. Should be mandatory.

 

[ThundyCat]

updated my account to 2fa yesterday. Should be mandatory.

It will be.

If you don't have 2FA enabled, you will not be able to see the MM.

 

[VaderDSL]

updated my account to 2fa yesterday. Should be mandatory.

Same. I tend to use 2FA everywhere that has it, but I hadn't enabled it on here, but now I have at least.

 

[ThundyCat]

MM now reopen, so closing this thread.