Account information shouldn't be an issue other than your profile name, email, and IP.
The page where you login isn't part of Vanilla forums and is part of Nexon's oauth system so it can share your username/email, profile name, IP, and maybe some other meta stuff with the Vanilla forums software. That login page passes a secret token to the forum software and then it creates or logins into a forum account as needed. Passwords shouldn't be shared and it'd be dumb for even Nexon to do that (that oauth login page handles the actual login process and token generation)*. (EDIT: Just checked, they use a mixture of both oauth and a slightly modified jsConnect (the Vanilla SSO plugin). Passwords still aren't shared regardless of authentication method.) It all seems to be localized to the forums database/software and the official main website and the actual game seem to be clear so other than your email and IP, I wouldn't worry about it too much. I'd be
a lot more worried if an unauthorized post was made on the official Nexon websites since I believe that you need access to the Nexon America intranet to access their Umbraco (their CMS) management pages. (Which is also why when something happens in the middle of the night or in the weekend, posts on social media and the forums are made much more faster than the official website posts since that requires someone in the office. I distinctly remember this happening before but they blamed it on an error with their software when they probably thought it wasn't worth driving to the office to make a damn post.)
EDIT: Unlike when you login to the actual MapleStory game**, your forum account and Nexon account is technically independent from each other. That's why when you go on the Nexon websites and you see that you have been disconnected/timeout, your forum account may still be logged in. And why when you change your profile name on the Nexon Launcher, you have to relog (so the updated token from the login page can update your profile name on the forums). And I see an image that's floating around that appears to be a packet editor, not code injected into the forums as some have been saying (could be wrong of course, not even really sure what I'm looking at). And the page where an image with a short message that takes over the page of page 1 on that banana thread is the hacker editing a comment from Neospector and using HTML to take over the page (remember when KTBN said he was really excited to use HTML on the forums when it first launched? That's typically why people don't enable HTML so things like this won't happen.)
Also, I think it's all from the user "inb4" on the forums. S/he abused a hole in Nexon's custom modifications to the forum software that allowed it to pick other avatars from other Nexon games earlier this week and if you hover over the "Edited at x:xxam" things from the suspicious OneLetter posts, it says it was edited by "inb4". Probably gave him or herself admin powers.
*Source: I've used Vanilla forums before and helped someone with single sign on logins. Also, you can look up how Vanilla forums handle single sign on stuff and unless Nexon made serious modifications, which I highly doubt, it should work pretty much the same as everyone else's.
Vanilla jsConnect docs:
http://docs.vanillaforums.com/help/sso/jsconnect/
Vanilla Wrote:Data that can currently be passed over SSO with jsConnect:- Unique ID from your system (required)
- Email (required)
- Username (recommended) [mf26 note: this would be your profile name]
- Photo URL
- Roles (Vanilla’s permissions management groups) [mf26 note: I had trouble getting this to work so I'm not sure if Nexon uses this. ]
**Technically they
are independent as well, but as far as I'm aware, the game server does read directly from the global account database unlike the forums.
.
