Regarding the data breach

Processor · 2019-03-23 17:59:08

Please visit everybodyedits.com at your own risk. Do not create new accounts in the game.
The game is hacked and we suspect that the hack is still ongoing.
The attackers have shown the ability to access the servers.
Flash is not a secure platform. Downloading content from untrusted servers can leak your password and potentially install viruses on your PC.

Everybodyedits.com is currently hacked and no longer safe.
Please change your password on any other site where you're using the same password as on EE.

So, this confirms a few things:
- Your private inbox letters and reports were leaked.
- Your E-Mails ARE ABOUT TO BE LEAKED
- Your IP addresses: probably breached
- The people running the game do not care to tell you about it

Citizens of EU, please contact your appropriate data protection authority about this breach, as the people running this game do not seem to take laws seriously!
You can find your DPA here: https://edpb.europa.eu/about-edpb/board/members_en

I also recommend not logging into EE without a VPN to protect your privacy.

Xenonetix blames PlayerIO for the breach. If that's the case: change passwords on other accounts if they use your EE password.

I shared these messages from a private conversation I had with Xenonetix. I believe the community deserves to know, as personal information is a sensitive subject and he does not take it seriously.
There was no explicit request from Xenonetix to keep the messages off record.

Snowester, Zumza, SirJosh3917, Luka504, XdGameur25, Phinarose, rat, 2b55b5g, drstereos, Kikikan, ttskate53, Minimania, PTU, St1ckS4m(EE), TaskManager, skullz17, Loganyoshi, Vinyl Melody, MartenM, HelpMe222, Slabdrill, Anch, Swarth100, Andymakeer, Priddle, Emma333, NegaStrife, Victoria, capasha

Vitalijus · 2019-03-23 18:01:31

Processor wrote:

https://i.imgur.com/EztPnPv.png
https://i.imgur.com/9VLcszx.png
So, this confirms a few things:
- Your private inbox letters and reports were leaked.
- Your E-Mails ARE ABOUT TO BE LEAKED
- Your IP addresses: probably leaked
- The people running the game do not care to tell you about it
Citizens of EU, please contact your appropriate data protection authority about this breach, as the people running this game do not seem to take laws seriously!
I also recommend not logging into EE without a VPN to protect your privacy.
Xenonetix blames PlayerIO for the breach. If that's the case: change passwords on other accounts if they use your EE password.

Me knowing that I won't be hit as hard since I saw this all coming months ago and got my secret information (supposedly) deleted, all you will get is my vpn, russian swears password and my email, you guys are all doomed! :lol:

Snowester · 2019-03-23 18:02:25

Petition for a better EE owner

TundrumMax, XdGameur25, Weirdoverse, Slabdrill, TheTemmie, 272

Guest. · 2019-03-23 18:06:01

how to be an ee owner in 2019:
- demod people for not agreeing with you
- attack your own customers
- fail to notify your customers the entire history of private reports and inbox messages in the game have been leaked

LukeM · 2019-03-23 18:23:31

Quick response (because we're really busy right now):
Yes (as everyone has probably already seen) some in-game mail was included in a pastebin yesterday
A small number of player's emails may be leaked in the near future, but the vast majority of accounts are safe
A larger number of IP addresses may also be leaked in the near future, but these are generally not personally identifiable, and change every couple of days anyway
All passwords are safe

We do care about these issues, and we will alert users in accordance with GDPR, its just that we're very busy right now and we're still waiting to gather all the information we need before sending formal notifications.

And yes, PlayerIO is largely to blame for this breach, we're currently in the process of getting them to clear up the security holes that we can't ourselves, we're doing what we can as fast as we can (and trying to stir up drama really doesn't help, Processor )

Processor · 2019-03-23 18:38:57

I have information telling me that the breach happened as of at least tuesday.

Under GDPR you must report breaches immediately and within 72 hours of them happening.

You have already failed to do this.

Xenonetix clearly does not understand that it's his responsibility to let the users know (see: https://i.imgur.com/lMUeIwl.png)

That's why this topic exists.

I recommend all Europeans to file a complaint at their country's DPA (https://edpb.europa.eu/about-edpb/board/members_en).
The process will take a few minutes, but the more complaints they get for EE, the higher the priority it will get.

Remember that EE is still a company based in EU (UK).

Edit:

Also, @LukeM: - you for calling this "stir[ring] up drama". I have rights and you aren't respecting them.
PlayerIO being at fault does not shift the responsibility from you to them. It's your game and you're responsible for choosing the right service providers.

XdGameur25, Kikikan, Zumza, Minimania, Loganyoshi, 2b55b5g, Swarth100

Kikikan · 2019-03-23 19:14:38

LukeM wrote:

stir up drama

Man: *Murders someone*
Eyewitness: OMG THAT GUY MURDERED SOMEONE
Man: Look, I'm getting rid of the corpse, stirring up drama doesn't really help

Zumza, rat, 2b55b5g

LukeM · 2019-03-23 19:21:36

Processor wrote:

I have information telling me that the breach happened as of at least tuesday.
Under GDPR you must report breaches immediately and within 72 hours of them happening.
You have already failed to do this.
Xenonetix clearly does not understand that it's his responsibility to let the users know (see: https://i.imgur.com/lMUeIwl.png)
[...]
Also, @LukeM: - you for calling this "stir[ring] up drama". I have rights and you aren't respecting them.
PlayerIO being at fault does not shift the responsibility from you to them. It's your game and you're responsible for choosing the right service providers.

What information is that?

The files clearly have dates and times on them, and contain data from yesterday, so obviously couldn't have been created before that

I'm not saying that you shouldn't complain if we do something wrong, just don't complain in anticipation of us doing something wrong

Processor · 2019-03-23 19:33:48

LukeM wrote:

I'm not saying that you shouldn't complain if we do something wrong, just don't complain in anticipation of us doing something wrong

I am complaining about Xenonetix' lack of understanding for the severity of this issue. He told me EE isn't responsible for informing the community, so I made this topic.

Norwee · 2019-03-23 19:39:36

Xenonetix's desire to ban processor intensifies.

Snowester

TaskManager · 2019-03-23 19:47:41

processor is the new atilla now!

PTU, rat, Vinyl Melody

peace · 2019-03-23 19:51:04

maby let teh staff first fix the leak to prevent that it grows more an dmore? and users are well aware fo the attacks from ee so with a bit logicall thinking you know teh staff will do anything about fixzing it

LukeM · 2019-03-23 19:57:19

Processor wrote:

LukeM wrote:
I'm not saying that you shouldn't complain if we do something wrong, just don't complain in anticipation of us doing something wrong
I am complaining about Xenonetix' lack of understanding for the severity of this issue. He told me EE isn't responsible for informing the community, so I made this topic.

Currently we're in a bit of a gray zone where you definitely could argue that we don't need to inform the community.

The regulations state that you need to notify people if the data that was leaked puts the owner of the data at risk, which isn't really the case for in-game mail which is unlikely to contain anything sensitive.

Of course we will notify people in due course through a method we deem suitable for the severity of the data leaked (for example probably just an in-game news post and forum topic if it turns out nothing else was leaked, but maybe an email if it's something more severe), but for now we're still collecting information, and even if the GDPR did apply we'd still be well within the timeframe we'd be given to notify people.

Minimania · 2019-03-23 19:57:56

Yeah, okay. Glad to know that if any of my private information or conversations were leaked that it all could've been prevented if I had known sooner.

skullz17

Kikikan · 2019-03-23 20:07:03

LukeM wrote:

which is unlikely to contain anything sensitive.

unlikely
Meaning that there is a chance that it puts the owner of the data at risk.
This is not Russian roulette, nor a probability exercise in a Math student's book. If there's a chance, you have to notify the community.

LukeM · 2019-03-23 20:16:23

Kikikan wrote:

LukeM wrote:
which is unlikely to contain anything sensitive.
unlikely
Meaning that there is a chance that it puts the owner of the data at risk.
This is not Russian roulette, nor a probability exercise in a Math student's book. If there's a chance, you have to notify the community.

Note: I'm only talking about the laws and regulations currently, of course we will do more than the bare minimum that the law requires us to do.

The GDPR specifically states that you only need to notify users if the data is likely to put the owner at risk (their words not ours), and that even if it does we have until Monday to do so, so please don't accuse us of breaking the law unless you have done research into the relevant laws and what actually happened XD

Zumza · 2019-03-23 20:56:46

I extrapolated 108 unique emails from the in-game mail file.
A lot of them contain the real names of the owner (some complete, some only the first name).

P.S. I didn't knew Xenonetix has a middle name before.

Slabdrill

Processor · 2019-03-23 21:15:58

I had someone run an analysis.

Today's leak contained
- 841 mentions of "@"
- 29 mentions of "pass:"
- 13 mentions of "password:"

LukeM wrote:

XD

skullz17

Snowester · 2019-03-23 21:17:39

Processor wrote:

I had someone run an analysis.
Today's leak contained
- 841 mentions of "@"
- 29 mentions of "pass:"
- 13 mentions of "password:"
LukeM wrote:
XD

I notice some gemcodes and emails lol.

Tomahawk · 2019-03-23 21:20:57

I don't think Xeno is denying that he should inform users about leaked data, but rather that he is responsible for the breach.

Let's not be so quick to call people evil. It is in fact also in Xeno's best interests to resolve problems quickly and to everyone's satisfaction.

LukeM, rat

LukeM · 2019-03-23 21:36:38

Pretty much what Tomahawk said, we're definitely going to put out a formal statement once this is all over and once we have all the information we need, we're mostly just defending ourselves from the outright false claims you're making that we're breaking the law (as we understandably would).

Please just trust that we're doing all we can to undo the damage done by the previous attacks, and to prevent further ones, and trust that we will (or at least hold off the accusations until we don't) release a formal statement summarising what's happened to those affected.

peace · 2019-03-23 21:47:55

i agree on what lukem says let teh staff first fix the leak to prevent itfrom growing i mean what if there is a water leak in a factory youre upstairs goign to your office downstairs are all your workers you hear something ad see the floor is a bit wet you check and see a leak what do you do first?
1. i go downstairs ot inform all my workers that tehre is a leak then go upsatris to fix th eleak knowing it may have grown futher nd cased more damage
or
2. i try to fi the leak myself first with some help i can gather as fast as spossible an dmake sure all is safe then i go downsstatir sinforming the people what happaned

i woudl go for #2

Nexus221

Joeyc · 2019-03-23 22:09:27

Thank the god this thread exists, practically a life saver. I see no reason why Xenonetix should be withholding this information from the community exactly...? Especially since we should have the right to know this sorta stuff

Processor · 2019-03-23 22:19:04

@peace: User passwords have been leaked. IP addresses have been leaked (of active users, these are not old IPs). I would inform the users so they can change their passwords and take the necessary steps to secure their account and all other sites that use the same password.

Tomahawk wrote:

rather that he is responsible for the breach.

Its his game so yes, he is responsible for the breach. Take a moment to realize that responsibility != fault. While it may be PlayerIO who's at fault, EE's staff is responsible for the breach and must take the necessary steps to minimize damage to the users first, as they have topmost priority. Therefore, users must be informed first.

Instead, the current staff is covering their own ****.

Snowester, Zumza, XdGameur25, coinage, Minimania, 2b55b5g, Kikikan

Snowester · 2019-03-23 22:32:28

Everyone, the emails and ip address are leaked in the current world spam. I don't know much but quickly CHANGE YOUR PASSWORD.

Minimania, 2b55b5g

Official Everybody Edits Forums

#1 2019-03-23 17:59:08, last edited by Processor (2019-03-24 21:45:41)

Regarding the data breach

#2 2019-03-23 18:01:31, last edited by Vitalijus (2019-03-23 18:02:03)

Re: Regarding the data breach

#3 2019-03-23 18:02:25

Re: Regarding the data breach

#4 2019-03-23 18:06:01

Re: Regarding the data breach

#5 2019-03-23 18:23:31, last edited by LukeM (2019-03-23 18:26:53)

Re: Regarding the data breach

#6 2019-03-23 18:38:57, last edited by Processor (2019-03-23 18:58:22)

Re: Regarding the data breach

#7 2019-03-23 19:14:38

Re: Regarding the data breach

#8 2019-03-23 19:21:36, last edited by LukeM (2019-03-23 19:28:54)

Re: Regarding the data breach

#9 2019-03-23 19:33:48, last edited by Processor (2019-03-23 19:42:06)

Re: Regarding the data breach

#10 2019-03-23 19:39:36

Re: Regarding the data breach

#11 2019-03-23 19:47:41

Re: Regarding the data breach

#12 2019-03-23 19:51:04

Re: Regarding the data breach

#13 2019-03-23 19:57:19

Re: Regarding the data breach

#14 2019-03-23 19:57:56

Re: Regarding the data breach

#15 2019-03-23 20:07:03

Re: Regarding the data breach

#16 2019-03-23 20:16:23, last edited by LukeM (2019-03-23 20:20:48)

Re: Regarding the data breach

#17 2019-03-23 20:56:46

Re: Regarding the data breach

#18 2019-03-23 21:15:58

Re: Regarding the data breach

#19 2019-03-23 21:17:39

Re: Regarding the data breach

#20 2019-03-23 21:20:57

Re: Regarding the data breach

#21 2019-03-23 21:36:38

Re: Regarding the data breach

#22 2019-03-23 21:47:55

Re: Regarding the data breach

#23 2019-03-23 22:09:27

Re: Regarding the data breach

#24 2019-03-23 22:19:04

Re: Regarding the data breach

#25 2019-03-23 22:32:28

Re: Regarding the data breach

Board footer