Damage Control

Scripting Helpers community,

Today, June 30th, one administrator's account on our website was accessed by a third party. The attacker had access to the account for roughly thirty minutes before the website was locked down. The attacker edited content on the website, most notably our most recent blog posts, which have now been restored.

The attacker also had access to an incomplete admin panel. The admin panel could edit user permissions and display user logs. The user logs contain information about questions, answers, logins, user name changes, etc.

The attacker had access to all recent IP addresses and email addresses used by all accounts. While it is unlikely that the attacker stored the vast majority of user information, it is more likely that he accessed specific user accounts that were registered to our website that could be considered "high value" - such as website administrators, Roblox administrators, and famous Roblox users.

We have no reason to believe that any other user information has been compromised at this time. Please note, however, that if your email is associated with a password in an account dump that's been posted online (from a previous hack of an unrelated website in the past), then your ROBLOX username will now be associated with that information.

I would like to apologize on behalf of the entire Scripting Helpers team for this incident. We are truly sorry about this and we will try to do better in the future.

— evaera, Owner, Scripting Helpers