Habbo security issue (user details leaked!)

[Mr-Trainor]

It's been over 24 hours and they haven't even emailed us to make us aware of the issue! If I wasn't a Habbox Forum user, I may not have even noticed.

[alilbitoflauren]

Omg not happy about this if any of my furni is missing that is it im going to go up to the habbo office myself and scream my face off at them all!

[Drunq]

Wtf hope mine are safeee! Sounds like **** to me they dunno what their doing nowadays, security

[Kyle]

Is anybody able to shed a little more light into what has actually happened? Not full specifics but a little more detail would be nice. Was it another faux pas on the zendesk side of things or to do with the client itself? What details were actually exposed? How long was it possible? @edible; @Shorty; @Abdicators;

[edible]

Is anybody able to shed a little more light into what has actually happened? Not full specifics but a little more detail would be nice. Was it another faux pas on the zendesk side of things or to do with the client itself? What details were actually exposed? How long was it possible? @edible; @Shorty; @Abdicators;

From my limited knowledge: people who were aware of and exploited this security flaw could find the email, date of birth and other registry information. It was unrelated to zendesk / help tool and the client. It could be done by those who weren't even logged into Habbo and or the client. I don't believe any information was downloadable so unless the handful of people searched for you specifically, you'll be fine.

There was no batch of users that are more at risk than others. Those who knew about the exploit could find information on ANY user.

Therefore, although, I don't know as much as a few people on this forum it is definitely advisable to change your email. This is just what I gather / have been told.

[myles]

cba to change email

[edible]

Oh yeah something that in my opinion is important:

When you change email (you definitely should) make a NEW id with your old email.

So say your Habbo name was Habbo and your email was [email protected] and you decided to change it to [email protected] I would make a new ID with the email [email protected]. This is because if anyone made a note of the email you use could make an ID with it and send in a help tool ticket saying "I need my name 'Habbo' reset back to this email". Staff will see the email used to be attached the account and are more likely to do it. Of course, you'll still have access to the email but they might change it before you notice.

As you can tell, I take my safety very seriously. I find it disgusting that this has happened again.

[Special]

some accounts' email address and date of birth to be exposed.

it wasn't too long ago that this kind of information was all it took to receive someones password & it would have been anyone's but habbo's fault

edit, i bet habbo solt the details to 3rd parties to earn a bit of extra cash to make up for declining members

[Mr-Trainor]

Oh yeah something that in my opinion is important:When you change email (you definitely should) make a NEW id with your old email.So say your Habbo name was Habbo and your email was [email protected] and you decided to change it to [email protected] I would make a new ID with the email [email protected]. This is because if anyone made a note of the email you use could make an ID with it and send in a help tool ticket saying "I need my name 'Habbo' reset back to this email". Staff will see the email used to be attached the account and are more likely to do it. Of course, you'll still have access to the email but they might change it before you notice.As you can tell, I take my safety very seriously. I find it disgusting that this has happened again.

Ah, that's a very good point! That must be the one thing I didn't do. Thanks, +rep.

[Plutonioo]

Is anybody able to shed a little more light into what has actually happened? Not full specifics but a little more detail would be nice. Was it another faux pas on the zendesk side of things or to do with the client itself? What details were actually exposed? How long was it possible? @edible; @Shorty; @Abdicators;

There was a tool that allowed you to see the email and birthday of the account you want. It could be used with Habbo.COM, Habbo.ES and HABBO.COM.BR (if I remember correctly), so by using it you could know the email and birthday of the any account.

Me and BelieveMeSafety were the ones who reported it to powertoo at night, she was totally unaware about it and she hadn't idea what was going on, so we gave to her the email she had in her account as proof. We considered the best was to keep secret as much as we can, so we didn't share it. Afortunatelly no much people got it, there wasn't a big problem.

You don't have anything to fear at all. Someone only could get the information of your account if he had the tool, and if he used it to check your account specifically.