Things We’d Rather Not Talk About 🙁
Details of 270,000 Trading Paints users have been leaked on the internet. Trading Paints is the parallel skins application to iRacing. The leaked details include login credentials and passwords in MD5 hash format. If you use the same set of credentials elsewhere, change them immediately.
Apparently yesterday somenone leaked 270k users with MD5 hashed passwords from @tradingpaints. I strongly recommend to renew the password and if you were sharing the password in another website, change it (and this time make it different) #iracing
— Musantro (@Musantro) August 28, 2023
We were alerted on Twitter yesterday that user data from Trading Paints was being sold on a questionably legitimate website. The accuracy of this data was verified by iRacing’s staff. While we awaited official confirmation, many had already taken action to change their passwords. The MD5 hash used to store the password cannot be decrypted but can be checked against a dictionary. Therefore, if it’s a commonly used word, that combination might be deciphered sooner than later.
A message from Trading Paints: https://t.co/yq3EgLXj6C pic.twitter.com/b2sGDbwIHP
— Trading Paints (@tradingpaints) August 28, 2023
Later, Trading Paints provided official confirmation, essentially urging users to do the same: change passwords on sites where the same user-password combination is used and reset the password in the future on Trading Paints.
