Jagex - Just About the Gaming EXploits

Dear StackOverflow,

At Jagex, the security of your information is especially important to us, so we’re really sorry to share with you that it’s possible that some of your Ace of Spades Forum account information may have been compromised during the last few days.

We know that some usernames, e-mail addresses, salted password hashes, and some other very limited forum profile information could have been accessed, all other more important data wasn’t at risk. All credit card, addresses, and other personal information held by Jagex is maintained in a separate high security system on a different network and have not been accessed and are not at risk.

As passwords are protected by means of being salted and hashed, the passwords are unreadable, however players with easily guessable passwords may be vulnerable. The breach appears to have occurred due to a new exploit in popular vBulletin forum software, which has been affecting many other vBulletin customers. We acted within hours of vBulletin announcing the exploit to its customers, taking all necessary actions to secure the forums; however unfortunately the exploit appears to have been used on the Ace of Spades forums within this short timeframe.

We recommend you change your Ace of Spades Forum password as soon as possible, and your password on any website where you may have used the same login information as a precaution. We are currently working to restore service to the forums, and ensure they are secure. Within 24 hours of the forums being restored we will require players logging into the forums to change their passwords. We recommend all users select a password consisting of letters, numbers, and special characters of at least 8 characters in length.

We apologise about this situation and any inconvenience it may cause you. We will continue to prioritise account security in the future.

If you have any questions or concerns relating to this, please contact us at aceofspades@jagex.com.

Sincerely,
Jagex Security Team.