At least it’s just the forum. Plus it says the passwords were encrypted. Whoever logged in with the stolen admin account and downloaded the data probably can’t even open it.
Quote:
“The nightly full backups that were downloaded expose all public forum posts, all team forum posts, all messages sent through the user-to-user messaging system, and user data including forum username, email address used for notifications, and an encrypted (hashed and salted) password generated by the MyBB (v1.8.27) software,” Kodi said last week.
All passwords, the software maker said, should be considered compromised, the same as user private data, including the information shared via the user-to-user messaging system. The admin team was working on performing a global password reset, Kodi said last week.