On Friday, a hacker gained unauthorized access to my server that hosts the TeamLeague and STCBunch websites and bots. I took the server offline for most of the day to assess the damage. The TeamLeague bot and this website are back online now, although STC remains offline.

Unfortunately, the hacker succeeded in downloading the hashed TeamLeague passwords of all players (and likewise for STCBunch players).  The hacker began logging the unencrypted TeamLeague passwords of players who logged on to the website; this was successful for 24 players. If you are among the 24, you have already received a message about it, and it is imperative that you not use the stolen password anywhere. For everyone else, it is still important to change your password.

Therefore I have reset the TeamLeague passwords of all players. To log into the website, you will have to set a new one using the command tell teamleague set password XXXXXXXX on FICS, replacing XXXXXXXXX with your new password.

Important: do not reuse your old TeamLeague password. If you use your old TeamLeague password on any other site, you should change it immediately, because the hacker may know it.

I apologize for the inconvenience, but taking the server offline and resetting all passwords was the only prudent option. I have also taken the opportunity to use a more secure algorithm to hash the passwords.

Thanks to seberg and chaostheory for assisting me in recovery from the hack.