Possible Nexon Database Exploit?

Yes, I know the title is a bit extreme. I just wanted you all to be aware of an issue that I fell victim to earlier this morning.

My account was hacked, completely stripped of anything valuable, approximately 5-6 billion worth of mesos.

I cannot tell you how this happened, or why it happened, all I know is that it did. There is currently only one person who knows my info, and can attest to the fact that each my UserID, my password, and my PIC could not be acquired merely by guessing, and that somehow they (the hacker) gained access to my info. I do not know from where.

I just wanted you all to be aware of this, so you can take the proper protection. I realize some of you may not log in through the site, and I would suggest that you continue doing so for the sake of your possessions.

If there is a thread similar, if this needs to be moved, or there is any other problem, feel free to let me know.

EDIT: Let it be known that I do not in fact have a key logger, as I scanned my computer last night before any of this actually happened.

 Spoiler

 Spoiler

 Spoiler

Calling FUD unless proof'd.

Calling FUD unless proof'd.

I don't know what that is.

Was your email compromised, if not then it was probably the same that happened too me, and takebacker can back me up that no one else had my pomegranate. llol

In fact what clues do you have, Email is a BIG thing, was it hotmail domain? yahoo? Gmail? Did you log onto the site last time you were able to log in? Were there any characters besides that, any other accounts, ect ect.

Was your email compromised, if not then it was probably the same that happened too me, and takebacker can back me up that no one else had my pomegranate. llol

The account is under my father's email address, which is through our cable company/internet provider. I'm going to contact my mom ASAP so she can change the password.

EDIT: But as far as I know, his email is secure.

The account is under my father's email address, which is through our cable company/internet provider. I'm going to contact my mom ASAP so she can change the password.

EDIT: But as far as I know, his email is secure.

Mine was also cable company, but was it just that one character? Was he able to relog? Was your internet available?

Mine was also cable company, but was it just that one character? Was he able to relog? Was your internet available?

It was the whole account, which consists of 8-9 chars. I can't remember off the top of my head. I was at work while this all happened, and was fortunate enough to have my friend notice and we took necessary action to change the password so the hacker will be unable to get back on. At least for now.

I'm also in the middle of moving accounts, as I'm not going to rebuild myself from the ground up only to get hacked again.

It was the whole account, which consists of 8-9 chars. I can't remember off the top of my head. I was at work while this all happened, and was fortunate enough to have my friend notice and we took necessary action to change the password so the hacker will be unable to get back on. At least for now.

I'm also in the middle of moving accounts, as I'm not going to rebuild myself from the ground up only the get hacked again.

Mine was different, I lost internet connection and he managed to I guess hijack it, I can't imagine any other reason for hiim to just hit my drk then not like another 12b in gear.

Mine was different, I lost internet connection and he managed to I guess hijack it, I can't imagine any other reason for hiim to just hit my drk then not like another 12b in gear.

Yeah, I vaguely remember your thread. And unless the hacker is completely able to wipe-out my college's internet service, which I doubt, then I had access to the internet the whole time. But, like I said, I was at work.

I just want everyone to be aware of this. It was not an easy job to hack my account, and I don't want anyone else to fall victim to it.

Wouldn't be the first time...

One of my friends got hacked yesterday =/ Lost everything he had. And he didnt share his info with anyone.

His email did get hacked though, one day all of a sudden the pass to it got changed. Then rest follow suit~

Wouldn't be the first time...

This I know. One of my other accounts fell victim to this the last time it happened.

Sorry man, I can't think of anything to even explain it. I really doubt it was something as silly as keylogging/Account sharing.

Sorry man, I can't think of anything to even explain it. I really doubt it was something as silly as keylogging/Account sharing.

Nothing to be sorry for. In the end it's all just a game. I'd just prefer if it didn't happen to anyone else, hence the making of the thread.

One of my friends got hacked yesterday =/ Lost everything he had. And he didnt share his info with anyone.

His email did get hacked though, one day all of a sudden the pass to it got changed. Then rest follow suit~

My friend seems to have been affected by this too. Though, I have no idea on whether or not their email was affected, nor do I know if anything was taken. They were, however, capable of changing the password. Although I found it odd that it was their alternate account that has been affected, unlike their main account (whom they mostly play on). Whoever got on their account just... botted to level up somewhere. Strange as hell.

I wonder what the hell's going on, anyway.

Had your infos been changed, I would have told you it's like what just happened to me: Hacker hacked me, changed all infos, I regained access, logged in, only WGs were gone, everything was placed in invos

All in all, sorry for your loss.

I wonder what the hell's going on, anyway.

I want to know, too. The same guy who also has my info had his FM mule account hacked, netting the hacker about 1b in profit. His main is unaffected thus far, so I doubt there is a possible connection.

Let it be also be known that I rarely play anymore due to college.

All in all, sorry for your loss.

Thanks. I appreciate it.

Does it have anything to do with this...?

We have been informed by Epsilon, the vendor that sends email to you on our behalf, that your e-mail address may have been exposed by unauthorized entry into their system.

Epsilon has assured us that the only information that may have been obtained was your first and last name and e-mail address. REST ASSURED THAT THIS VENDOR DID NOT HAVE ACCESS TO OTHER MORE SENSITIVE INFORMATION SUCH AS SOCIAL SECURITY NUMBER OR CREDIT CARD DATA.

Please note, it is possible you may receive spam e-mail messages as a result. We want to urge you to be cautious when opening links or attachments from unknown third parties.

In keeping with standard security practices, the College Board will never ask you to provide or confirm any information, including credit card numbers, unless you are on a secure College Board site.

Epsilon has reported this incident to, and is working with, the appropriate authorities.

We regret this has taken place and apologize for any inconvenience this may have caused you. We take your privacy very seriously, and we will continue to work diligently to protect your personal information.

Sincerely,

The College Board
Please do not respond to this e-mail as it is not a monitored e-mail address. If you have a question or comment concerning College Board e-mail services, please contact our Customer Service Department.

To ensure that collegeboard.com e-mail is not incorrectly identified as spam, please add Collegeboard@noreply.collegeboard.org to your address book.

© 2011 The College Board, 45 Columbus Avenue, New York, NY 10023-6992. All rights reserved. View a complete list of College Board trademarks.

Does it have anything to do with this...?

My mom just told me that she's been getting those emails, and I honestly couldn't tell you yes or no. I figured that was only related to CollegeBoard, and didn't apply to Nexon.

Rather, it'd be a rather ridiculous long shot that the hacker had acquired the account's email through that apparent leak.

Does it have anything to do with this...?

I got that same thing not too long ago

Think anyone who gets that should change their password to their email? But I also access via my phone>.>