Karn Aanug

UPDATED information by Sapience:

Read the full updated information from Forum Status Update thread.

Original post:

There might be a security issue with the Turbine accounts so it's highly recommended that people change their passwords. Turbine forums are offline while the issue is being investigated.

Turbines Announcement

We have identified a potential issue in the forum system. As a precautionary measure we have disabled our forums while we investigate. We will bring the forums back online when we complete our work. We thank you for your patience.

Password can be changed through this Turbine Account Page link.

Already done.

Done

Been nosing around a bit, seems the germans spotted it first: http://lotrocommunity.com/forum/topic/927-wichtig-lotrocom-sicherheitslucke
According to this the turbine programmers were lazy securing the data after the migration. Seems turbine just did a quickfix. I don't understand the programming stuff, but I did my best for an english summary

English thread http://lotrocommunity.com/forum/topic/935-official-forums-down/page__st__60

They took over account of my mates while he was in skirmish raid. He just crashed and couldn't come back. After few minutes all his chars disapeared from friend lists (deleted). It took him over a week to get account and chars back. Turbine said that they can't give him his gold back (over 300).

#5077263 Garhaluk wrote:

They took over account of my mates while he was in skirmish raid. He just crashed and couldn't come back. After few minutes all his chars disapeared from friend lists (deleted). It took him over a week to get account and chars back. Turbine said that they can't give him his gold back (over 300).

Ok. Everybody.... PAAAAAAANIC
thanks for that constructive info Garh

I have been unable to change my password. I can log onto the website using my regular username/password combination, but the same password does not work for the "old password" field in the password change page.

I had that same problem, Ymgarl, but it's not what it appears to be. You do actually change your password if your old pass is correct, regardless of the error message. Just log out and log back into myaccount using the new pass and it'll most likely work.

I had the same as Rags & Ymgarl.
Messed-up Turbine...

The first error message is the wrong one, it actually changed your password. All the times you try after that, the error is correct, because you're still trying to use the old password.

Turbine has updated the information about the potential security issue.

Turbine Announcement by Sapience.

Forum Status Update
Recently, we were made aware of an issue with the security of our LOTRO community web applications. We take all potential issues seriously and we took the forums offline while we investigated and resolved the issue. The forums are now open for normal use.

Please note that we will continue to perform maintenance on our community websites over the coming days and some features may be unavailable from time to time. Game services are not impacted and will continue to operate on a normal schedule.

Even though this issue appears to be limited in scope, if we believe that your account has been impacted we will contact you directly. As an additional precaution we recommend that all players change their passwords by visiting https://myaccount.turbine.com. Please remember to use unique, hard-to guess passwords that are not associated with other online services or sites, and always look for and report unusual activity in your account to Turbine customer support.

Thank you for your patience.


We ask our players to please direct all comments and discussion related to the recent community site issues to the official discussion thread. We will be redirecting any errant threads here as well.

Strange thing is that i did change my password few days ago and i always thought that the forum password and client password are the same. Now when i log on to the forum it only accepts my old password, not the new password which my game client uses.

#5094306 Morgatai wrote:

Strange thing is that i did change my password few days ago and i always thought that the forum password and client password are the same. Now when i log on to the forum it only accepts my old password, not the new password which my game client uses.

Spoooky