Important - CrystalWeb security issue - some bidorbuy users are affected

[Guest MacMuffin]

Dear all,

 

this afternoon we learned that due to a vulnerability with a service provider for the ISP CrystalWeb, close to 5000 CrystalWeb login details leaked onto the web. The information compromised via CrystalWeb's service provider included customer names, email addresses and passwords in clear text.

 

In collaboration with CrystalWeb we identified that 123 customers shared the same password on our platform and we have disabled those accounts with immediate affect.

 

If you have lost access to your account, you are required to contact our customer care centre to re-verify your account and we will not be able to just simple reset your account. We apologise for this inconvenience, but believe this security measure is also in your interest.

 

If you are an affected user and you have used the password on other websites, we urge you to change the password on those sites as soon as possible.

 

We also recommend that if you are affected by the CrystalWeb password leak, that you register your email with https://haveibeenpwned.com/ so that you can be notified if your email-address is compromised elsewhere.

 

We can confirm that no bidorbuy account was compromised and that no unauthorised access was gained to any of the 123 accounts in question as we acted swiftly to disable those accounts. We also want to make clear, that bidorbuy has no relationship to CrystalWeb or their service provider which caused the leak. The bidorbuy infrastructure is hosted and maintained within our own data-centre by our own engineers without any access from 3rd parties or other service providers.

 

Should you have any further questions or concerns, please contact our customer care centre, or post a question in here.