Information Regarding Recent Forum Compromise
UPDATE # 3: Upon further investigation, we have come to believe that data from our other game forums has been compromised as well though in a separate attack. Since we do not store passwords for these accounts in the forum software but in another location, no passwords, neither salted, hashed, nor plaintext were revealed.
UPDATE #2: Regarding the Unreal Engine and Unreal Tournament compromised forum data, we do not store passwords for either of the two sites in our forum software but in an entirely different location. Password fields for these forums represented in any leaked data are generated by Epic Games and have no correlation to Epic Games accounts.
UPDATE: For the safety and security of the information of our users, we have put the forums in question into maintenance mode while we continue our investigation.
We believe a recent Unreal Engine and Unreal Tournament forum compromise revealed email addresses and other data entered into the forums, but no passwords in any form, neither salted, hashed, nor plaintext. While the data contained in the vBulletin account databases for these forums were leaked, the passwords for user accounts are stored elsewhere. These forums remain online and no passwords need to be reset.
Also, we believe a compromise of our legacy forums covering Infinity Blade, UDK, previous Unreal Tournament games, and archived Gears of War forums revealed email addresses, salted hashed passwords and other data entered into the forums. If you have been active on these forums since July 2015, we recommend you change your password on any site where you use the same password.
We don’t believe that other Epic related forums were affected, including Paragon, Fortnite, Shadow Complex, and SpyJinx.
We apologize for the inconvenience this causes everyone and we’ll provide updates as we learn more.