DIR Return Create A Forum - Home
---------------------------------------------------------
Create A Forum - Support Forums
HTML https://support.createaforum.com
---------------------------------------------------------
*****************************************************
DIR Return to: Create A Forum Discussion
*****************************************************
#Post#: 18838--------------------------------------------------
DATA PROTECTION ISSUE: Forum backup sold to non-admin
DIR By: norbe
Date: August 11, 2017, 4:40 pm
---------------------------------------------------------
Need some help here... Someone from my forum bought a backup of
our entire forum database. This was done without permission from
the forum admin.
Him buying the database happened on this thread:
HTML http://support.createaforum.com/8/backup-of-forum-5179
HTML http://support.createaforum.com/8/backup-of-forum-5179
Is all the data on our forum now compromised? I have the
download link that contains the backup of the database for
download and seems unsecured, eg anyone who has had that link
can now have an access to everything we've done. PLEASE DELETE
THIS IMMEDIATELY.
I'm very concerned.
Our forum address, which we would like to maintain and keep
using perfectly and securely as it has been for over 10 years :
HTML http://taurialliance.smfforfree2.com
HTML http://taurialliance.smfforfree2.com
Norbe
#Post#: 18839--------------------------------------------------
Re: DATA PROTECTION ISSUE: Forum backup sold to non-admin
DIR By: CreateAForum
Date: August 11, 2017, 4:45 pm
---------------------------------------------------------
Removed. But how did you get the download link? Someone would
have had to sent it to you. I would advise changing the
passwords. They are stored hashed with sha1 with a salt.
#Post#: 18840--------------------------------------------------
Re: DATA PROTECTION ISSUE: Forum backup sold to non-admin
DIR By: norbe
Date: August 11, 2017, 4:51 pm
---------------------------------------------------------
--- Quote from: CreateAForum link ---
>
> Removed. But how did you get the download link? Someone would
have had to sent it to you. I would advise changing the
passwords. They are stored hashed with sha1 with a salt.
>
--- End Quote ---
Yes the link was sent to me. The user who bought it believed he
was acting in our interest, but had not asked nor informed us
before doing so.
A copy of our forum now exists on another host -this includes
all our past posts, even in restricted access areas he did not
have access to but far more importantly personal info such as IP
addresses of all of our users.
I hope his actions do not turn out to be malicious, but I am
sure there are others out there who would use this data
maliciously if they got it.
It is unlikely I can change all passwords for all users, but
will ensure admins are changed immediately.
Norbe
#Post#: 18841--------------------------------------------------
Re: DATA PROTECTION ISSUE: Forum backup sold to non-admin
DIR By: CreateAForum
Date: August 11, 2017, 4:57 pm
---------------------------------------------------------
Understand this was very unusual case and part of the reason we
put a fee in place.
#Post#: 18842--------------------------------------------------
Re: DATA PROTECTION ISSUE: Forum backup sold to non-admin
DIR By: norbe
Date: August 11, 2017, 5:15 pm
---------------------------------------------------------
All admins have now changed their passwords.
I'm sure it was an unusual case... The user who bought the
database is fairly new to us, and is being open about having
done it.
Is there anything else I can do to help secure the data and make
sure no-one else gets hold of future copies?
Norbe
#Post#: 18843--------------------------------------------------
Re: DATA PROTECTION ISSUE: Forum backup sold to non-admin
DIR By: CreateAForum
Date: August 11, 2017, 5:21 pm
---------------------------------------------------------
Well I will not allow others to do so from your forum unless it
is from an admin email on the forum.
#Post#: 18844--------------------------------------------------
Re: DATA PROTECTION ISSUE: Forum backup sold to non-admin
DIR By: norbe
Date: August 11, 2017, 6:04 pm
---------------------------------------------------------
--- Quote from: CreateAForum link ---
>
> Well I will not allow others to do so from your forum unless
it is from an admin email on the forum.
>
--- End Quote ---
Good. Thanks. Shame someone already got hold of it, but good to
know it won't happen in future.
Norbe
*****************************************************
Page 1 of 1