On 05/02/2023 we noticed an unusual announcement on the Brasil Tracker homepage, in which there was a link that led to the download of the database here on the website, from that we started investigating the problem, after internal investigations we discovered that the database had been invaded from PhpMyAdmin in which another old programmer used, where there was a security flaw that allowed access to the database.
That PhpMyAdmim was immediately removed, passwords changed, hash keys changed. Some users complained that when commenting on the subject on the website, the massage was deleted, why is that? We were implementing more security measures in the source code and infrastructure of Brasil Tracker, so that when this event was disclosed by us, it would not cause other invaders and subsequent inconveniences related to it.
At that very moment, all user passkeys were changed to avoid downloading without going through the HnR system (as a tutorial on this has been released), there is no need to worry about user passwords, all passwords are properly encrypted in SHA-256, so that no one knows the user's password, not even the Staff.
Finally, the main measures for this type of problem to occur again have been implemented, and some additional ones are being added, what remains for us is the Staff's sincere apology to our users for the inconvenience caused.
That PhpMyAdmim was immediately removed, passwords changed, hash keys changed. Some users complained that when commenting on the subject on the website, the massage was deleted, why is that? We were implementing more security measures in the source code and infrastructure of Brasil Tracker, so that when this event was disclosed by us, it would not cause other invaders and subsequent inconveniences related to it.
At that very moment, all user passkeys were changed to avoid downloading without going through the HnR system (as a tutorial on this has been released), there is no need to worry about user passwords, all passwords are properly encrypted in SHA-256, so that no one knows the user's password, not even the Staff.
Finally, the main measures for this type of problem to occur again have been implemented, and some additional ones are being added, what remains for us is the Staff's sincere apology to our users for the inconvenience caused.