DEVELOPER'S BLOG

DayZ Forum Security Alert

Here is a brief overview of the forum hack on forums.dayzgame.com.

Early Saturday morning we were alerted to a forum breach on forums.dayzgame.com. Within an hour of said breach we initiated a maintenance takedown of our forums to confirm and investigate. We found the source of the leak (we will not elaborate on said source). After confirmation of the database leak we Tweeted a brief notice to our users that they may want to change their forum passwords. We additionally built a mailing list to send notice to our forum users with a more in-depth message. While we will not specify the number of users affected, we will say that the information hacked was usernames, passwords and emails. Fortunately, this information had a layer of protection via a hashed, salted algorithm, so accessing the data stolen was not as simple as reading it on the page. An important note; this breach in no way impacts DayZ player accounts.

Some technical issues resulted in a portion of the emails not being sent to the full list of users. While unfortunate, we remedied this with a new email to DayZ forum members.

As it stands now, we're switching to the Bohemia Accounts authentication service to provide more security to our user's information. We'll additionally be implementing other protective measures in hopes of avoiding similar incidents in the future.

Published on