Put a hand up if you are sick of reading about these database hacks? Yeah… me too. Epic Games just announced that their forums, including the Unreal Engine forums, were the victim of a recent break in. Thankfully it’s not a huge deal, as password information wasn’t taken. User information however was taken and could certainly result in a rise in spam… yay. They don’t however expect you need to change your password on their forums. If you do however enter proper information when you sign up for forums (date of birth, name, etc.) you may want to be wary of unauthorized activity. In addition to the Unreal Engine forums, account information for several older Epic developed game forums was also compromised and in these cased, encrypted passwords were also taken.
The full details:
We believe a recent Unreal Engine and Unreal Tournament forum compromise revealed email addresses and other data entered into the forums, but no passwords in any form, neither salted, hashed, nor plaintext. While the data contained in the vBulletin account databases for these forums were leaked, the passwords for user accounts are stored elsewhere. These forums remain online and no passwords need to be reset.
Also, we believe a compromise of our legacy forums covering Infinity Blade, UDK, previous Unreal Tournament games, and archived Gears of War forums revealed email addresses, salted hashed passwords and other data entered into the forums. If you have been active on these forums since July 2015, we recommend you change your password on any site where you use the same password.
We don’t believe that other Epic related forums were affected, including Paragon, Fortnite, Shadow Complex, and SpyJinx.
We apologize for the inconvenience this causes everyone and we’ll provide updates as we learn more.