Page 1 of 1

DCP-o-matic bug tracker compromised

Posted: Tue Apr 18, 2017 3:19 pm
by carl
It has transpired that around noon GMT on 16th April the DCP-o-matic project in
our bug database was deleted by actors unknown. It appears that they gained
administrator rights in our installation of the Mantis bug tracker.

If you have a Mantis account and you use the same password on any other sites
you are strongly advised to change this password everywhere it is used.

At the moment I don't think anything else on dcpomatic.com was compromised.

The bug tracker has been restored from a backup and I don't think much has been
lost. If you added a bug or comment since 16th April you will need to re-add
it.

Apologies for any inconvenience.

Kind regards,
Carl