I truly appreciate you telling us Krin! Sylestia is one of the best parts of my day and I can't imagine being without it. I believe it's protection take priority, so I'm more than willing to wait for the revamp and fests and such for you to ensure our account safety!

Hey Krin,

Not sure if the people sending messages promoting other sites (and seem very botlike) are a massive concern as well, but user Redacted did send me a private message that is like this.

I regret having not saved it. . .

But thank you for doing everything (: I know I haven't been here long but you seem like an amazing, caring person <3 make sure you're getting enough sleep and still taking good care of yourself!

(sorry didn't realize it's bad to name thank you for fixing it)

It generally isn't appropriate to name-drop other players publicly - so I redacted the name of the player you mentioned.

If you ever run into suspicious behavior, you can always send me a PM notifying me and I can take a look.

I took a look at the PM logs from the player that you mentioned and I didn't see anything. So please PM me with more information.

I'm hoping that the one password is a really good one then.

Thank you for the transparency, Krin, it's really refreshing to see here especially being part of several communities where account security is seen as an afterthought by the staff.
I've lost an account on a previous game from such a brute force attempt and know how frustratingly common these data breaches tend to be across the internet and what little can be done in the aftermath of them, so I'd like to offer some general advice to people to protect themselves against them as cybersecurity is somewhat of an interest of mine now.

1. Keep all your financial account and email passwords unique from any other site. These are often brute forced when data breaches happen as people often share passwords between sites.
2. Look into setting up 2FA authetication (also known as two factor authetication) on your important accounts such as email addresses as an extra security measure and way for a site to identify you as the account owner.
3. There is a site by the name of 'Have I been pwned?' that offers a no cost search to check whether or not you've been a victim of a data breach on any website. This site compiles data on known data breaches across the internet.
If you have been personally affected by any, it is highly reccommended you change your passwords as your leaked password may be used by a hacker on other sites to attempt to get into your other accounts.

And the most important:
Don't share your account details with anyone and always double check the urls of the sites you visit to make sure they are accurate before entering any account information anywhere.

Thanks for informing us! I know I'm new, but that doesn't mean I will leave this website, thanks!

many years ago, maybe around 2009, I was a member of a website called subeta which was like neopets. this happened to the site and my account along with my email account were compromised and stolen. :/

I hope i can remember what email I used...lol. Glad you caught it in time.

Thx

Jeepers! Whoever that was, I hope they get caught and punished (SEVERELY) ASAP!! Yikes... I like the new security plan, and I hope it'll deter future jerks from trying this sort of junk again. ):<

Thanks for letting us know... seriously though, WTH did they expect to gain from this?! It's ridiculous. >.<