Important information from NarutoBase
This e-mail is sent to all members. Please follow instructions as your password has been reset.
You are receiving this message because you have an account registered on NarutoBase.net
The NarutoBase forums software was compromised by an external attacker. As a result, the attacker has gained access to read your username, email address and an encrypted copy of your password from the forums database.
If you have used this password and email address to authenticate at any other website, you are urged to reset the password on those accounts immediately as the attacker may be able to use the compromised personal information to access these other accounts. It is important to have a distinct password for different accounts.
The NarutoBase.net website is currently offline and we are working to restore this as soon as possible. Please take the time to change your NarutoBase.net account password when service is restored by using the following link:
We apologize for any inconvenience to the NarutoBase community, thank you for your understanding.
The NarutoBase.net Team
Some detailed information:
- A new leak was discovered this week in vBulletin in the install basement.
- This leak has been used by the attacker before we received this bug report by August 26 at 8:33 PM CEST
- After the attacked gained access by this leak, a new user was created with admin permissions. With this account, the attacker installed a plugin which gave access to one of our servers. On this server, he managed to gain access to the database as well and has seen the user database with the user information, encrypted password and e-mail address. This happened on August 27.
The passwords are encrypted and salted in our database to ensure safety. However, we still force all users to reset their passwords.
What we do know is the leak has been found and these scripts are removed without impacting the site. vBulletin is investigating this issue.
What we also do know is how extremely important it is to keep investigating all activity, all servers and all actions by everybody in order to ensure safety. Today we have failed to keep our name as the safest Anime community after 6 years of running without being compromised as what happened today.
I deeply apologize for any inconvenience to the NarutoBase community, to all of you, who have visited NarutoBase now and in the past and we hope you will trust us in the future.