Create A Forum - Support Forums

Need some help here... Someone from my forum bought a backup of our entire forum database. This was done without permission from the forum admin.

Him buying the database happened on this thread: http://support.createaforum.com/8/backup-of-forum-5179

Is all the data on our forum now compromised? I have the download link that contains the backup of the database for download and seems unsecured, eg anyone who has had that link can now have an access to everything we've done. PLEASE DELETE THIS IMMEDIATELY.

I'm very concerned.

Our forum address, which we would like to maintain and keep using perfectly and securely as it has been for over 10 years : http://taurialliance.smfforfree2.com

Norbe

Removed. But how did you get the download link? Someone would have had to sent it to you. I would advise changing the passwords. They are stored hashed with sha1 with a salt.

Yes the link was sent to me. The user who bought it believed he was acting in our interest, but had not asked nor informed us before doing so.

A copy of our forum now exists on another host -this includes all our past posts, even in restricted access areas he did not have access to but far more importantly personal info such as IP addresses of all of our users.

I hope his actions do not turn out to be malicious, but I am sure there are others out there who would use this data maliciously if they got it.

It is unlikely I can change all passwords for all users, but will ensure admins are changed immediately.

Norbe

All admins have now changed their passwords.

I'm sure it was an unusual case... The user who bought the database is fairly new to us, and is being open about having done it.

Is there anything else I can do to help secure the data and make sure no-one else gets hold of future copies?

Norbe

Well I will not allow others to do so from your forum unless it is from an admin email on the forum.

Good. Thanks. Shame someone already got hold of it, but good to know it won't happen in future.

Norbe