| Bill Jelen <bill@jelen.onmicrosoft.com> |
| Bill Jelen <bill@jelen.onmicrosoft.com> Notification of Data Breach at MrExcel.com anon125, 1) What happened? This is Bill Jelen from MrExcel.com. On the morning of December 6, 2016, our moderators detected a hack in progress at the MrExcel forum. We quickly acted to shut the forum down, removed the user, and restored from the previous day’s backup. At the time, we had no reason to believe that the hack had compromised any user data. However, on or about January 8, 2017, we became aware of evidence suggesting that some user information had been acquired in the December 5 hack and had been posted online. 2) What Information Was Involved? The hacker accessed and posted userid, e-mail address, and the encrypted password in the form of hash+salt. A hacker with a fast computer can test a billion passwords an hour and stands a 25% chance of breaking the password. The hacker also accessed and posted information from administrative fields showing your last login, number of posts and similar non-personally identifiable information. If you had an account at the MrExcel Message Board on or before December 6, 2016, you are affected. 3) What We Are Doing? We previously scanned for malicious code and restored from a backup to remove any lingering effects from the hack. Additionally, we continue to update and patch the website software from vBulletin and we are converting the website to use a Secure Socket Layer. 4) What Can You Do? We are requiring all members to promptly change your MrExcel password athttp://www.mrexcel.com/forum/profile.php?do=editprofile and encourage you to take other steps appropriate to protect this online account. We also encourage you to change your password and take steps to protect any other online accounts where you have used the same password with your username or email address for MrExcel.com. You are are further encouraged to maintain different passwords for MrExcel.com and for any other online account that connects to the same email address or password. During the investigation of this incident, you can search also for your e-mail address atFind the source of your leaks to find a list of data breaches involving your e-mail address. 5) For More Information Contact Bill Jelen – pub@MrExcel.com Date of Notice: January 14, 2017. |
