Perhaps most alarmingly, were also included. This meant that the hackers potentially had the email addresses and password hashes of the very people responsible for policing the game. Some admin passwords were so weakly hashed that they were cracked within hours.
Thus, even if you stopped playing Town of Salem five years ago, the Pastebin leak still represents a vulnerability in your broader digital life. town of salem data breach pastebin
For developers: If you store user data, hashing passwords with MD5 in 2018 is negligence. Use bcrypt, Argon2, or at minimum PBKDF2. Also, never expose an admin panel to the public internet without IP whitelisting. Perhaps most alarmingly, were also included
If you were a player during or before 2019, you should assume your data was compromised. Take these steps immediately: 1. Check HaveIBeenPwned Thus, even if you stopped playing Town of
While BlankMediaGames stated they do not store credit card info, the breach included billing names and shipping addresses for some premium users. Critical Review & Actions