WhiskyAuction password leak

[MikerG]

officiele response van WA:

Valued Whiskyauction.Com member,

some of our customers have received Apple alerts that their passwords for our website were disclosed in a password leak. As this seems to have led to a good bit of uncertainty about the security of our website, and whether our user information has been hacked, we would like to respond to these notifications.

First off, receiving this Apple notification for an account you use (e.g. for whiskyauction.com) does not necessarily mean the website in question has been hacked. It only means that the *password* you use for this website has been found in a data leak. It could be for a completely different website, and even by a completely different person that, by coincidence, used the same password that you have used for the website in question, in this case ours.

If you received this Apple alert yourself, or if you have used a possibly insecure, easy-to-guess password, especially if it is simply a regular word, please notify us about a desired password change.

It appears that in some communities this has led to the belief that our own database has been compromised. At this point, we have no indication that this is actually the case. We are, of course, investigating and following up on all information regarding this issue, and we are also following any hints and pieces of information that we receive from members of our community, just in case.

[TurboMcKwek]

Onderstaande is mij gevraagd te delen door WA.

Valued Whiskyauction.Com member,

some of our customers have received Apple alerts that their passwords for our website were disclosed in a password leak. As this seems to have led to a good bit of uncertainty about the security of our website, and whether our user information has been hacked, we would like to respond to these notifications.

First off, receiving this Apple notification for an account you use (e.g. for whiskyauction.com) does not necessarily mean the website in question has been hacked. It only means that the *password* you use for this website has been found in a data leak. It could be for a completely different website, and even by a completely different person that, by coincidence, used the same password that you have used for the website in question, in this case ours.

If you received this Apple alert yourself, or if you have used a possibly insecure, easy-to-guess password, especially if it is simply a regular word, please notify us about a desired password change.

It appears that in some communities this has led to the belief that our own database has been compromised. At this point, we have no indication that this is actually the case. We are, of course, investigating and following up on all information regarding this issue, and we are also following any hints and pieces of information that we receive from members of our community, just in case.

Collectorly Yours
Thomas Krüger
Auctioneer & Valuer
http://WWW.WhiskyAuction.Com
Rendsburg Germany

Ik raad iedereen aan hun paswoord te laten veranderen, indien er maar enige twijfel is.

[TurboMcKwek]

Zie dat Michael mij net voor was

Ach, een dubbel gewaarschuwd mens telt voor twee...

[AquaVitae]

Terwijl ik dit lees krijg ik een email van betaaldienst Monese (nooit van gehoord trouwens) waarin mij wordt gevraagd om mijn emailadres te bevestigen?!?

Kan toeval zijn, maar het voelt niet in de haak. Ik heb ook maar gevraagd mijn account te verwijderen.

[fjharms]

Ze voelen zich nu wel een beetje overdonderd daar bij WA
Ik kreeg ook hetzelfde bericht als Soren, maar daarnaast ook de vraag van ene Eddy, in welke community het bericht over de security leak is gepost.

[Cask1988]

Onderstaande is gevraagd mij te delen door WA.

official statement

Ik raad iedereen aan hun paswoord te laten veranderen, indien er maar enige twijfel is.

Ook gehad inderdaad. Ze pakken het wel onwijs goed op

[MikerG]

Ze voelen zich nu wel een beetje overdonderd daar bij WA
Ik kreeg ook hetzelfde bericht als Soren, maar daarnaast ook de vraag van ene Eddy, in welke community het bericht over de security leak is gepost.

ditto

[cor0566]

Wow.
Goed dat ik deze post ook effe aanklik.
Sta of stond daar ook ingeschreven , alhoewel ik daar misschien het laatste jaar niks meer mee gedaan heb.
Ga het nachecken en omdat ik er toch niets meer mee doe mezelf uit laten schrijven.
Ik begrijp hier dat je daarvoor het beste hun eff kunt mailen.
Thanks voor de Tip.
groet Cor.