Racing Post Website Hacked

Paully D

Just received this lovely email. No credit card details stolen, but get your details changed quickly lads if you have an account with them but use the same email addresses and passwords elsewhere:

Dear XXXX

Despite our best efforts, the security on racingpost.com has been breached over the last 36 hours, in a sophisticated, sustained and aggressive attack. One of our databases was accessed and customer details were stolen.

Security is an area we take extremely seriously and our website has not been compromised previously. As soon as we were aware of the situation we did everything in our power to halt the breach. We have now established that a number of customer accounts were accessed. Although all the passwords are encrypted, we believe that there is still a chance that some passwords can be deciphered. As yours is one of the accounts involved, there is a risk of identity theft. Please be aware that we do not store your credit card details on our website and these have not been the subject of any theft.

As part of our efforts to resolve the issue, we have turned off the ability to register / log-on to racingpost.com. You will still be able to access the site safely. Members' club content will also be available.

However, we are contacting you now to request that you take all precautions and reset your passwords on any other site which uses the same password as the one you use on racingpost.com as soon as you can. If, for example, you use the same password for your bookmaker accounts, email accounts or for social media we advise you to reset them. Mine is one of the accounts involved and I will be changing my passwords. We understand how inconvenient this is - and can only apologise for any difficulty this causes - but feel it is necessary under the circumstances.

Once we are totally satisfied that using your account details on racingpost.com is completely secure, you will need to reset your password on our site. We will send you an email with instructions on how to do this. For security reasons, there will be no links on the email. You will need to visit the racingpost.com website to make the changes. For now, please proceed with changing your passwords (if the same as your racingpost.com password) on any other site.

If you have any questions, please contact Racing Post customer services on 01635 246505.

Please be assured that we are currently reviewing all of our security measures and will put in place even stronger protection to stop this happening again. Extensive changes have already been made overnight with the assistance of industry-leading cyber-security experts.

We are extremely sorry that this unfortunate incident has occurred and thank you for your patience and understanding.

We will be in touch in due course once we have re-established the registration / log-in part of the site.

Yours faithfully


Bruce Milllington
Editor

Villain

Paully D wrote: »

Just received this lovely email. No credit card details stolen, but get your details changed quickly lads if you have an account with them but use the same email addresses and passwords elsewhere:

I got the email too but there is no mention on their site at all and the line that says:

Although all the passwords are encrypted, we believe that there is still a chance that some passwords can be deciphered

is worrying, why can't they tell us what encryption was used.??

BumperD

Got the same e-mail.

abarkie

Me too

kksaints

Got it too.

abarkie

Strangely enough its not on their news feed.

I wonder why!

brandon_flowers

Got is as well, seemed a very long winded load of ****e instead of giving proper instructions.

Colonel Sanders

Got it too!

Johner

I got it too, do I win? hehe.

hucklebuck

I hope they got my password, hack into my betting account and place some winning bets!

ste2010

hucklebuck wrote: »

I hope they got my password, hack into my betting account and place some winning bets!

Classic

the groutch

probably SRFC's revenge for them saying something bad about Willie Mullins.

Nowso

I have got a reply from Bruce Millington although all passwords were encrypted it may be possible to Crack the Encryption.

abarkie

Nowso wrote: »

I have got a reply from Bruce Millington although all passwords were encrypted it may be possible to Crack the Encryption.

O

So his statement that credit card details have not been compromised is, less than 100% correct, as access to the account means access to credit card details

Only decided to print it on their web site at 0944 today and the story is a reprint of the email

Very very poor really

Nowso

abarkie wrote: »

O

So his statement that credit card details have not been compromised is, less than 100% correct, as access to the account means access to credit card details

Only decided to print it on their web site at 0944 today and the story is a reprint of the email

Very very poor really

he says that credit card details were not held on the website

idont see it effecting credit cards as use of them needs extra information and codes that are not included in information.

but any accounts with the same password are effected ie boards . facebook etc

Villain

Nowso wrote: »

he says that credit card details were not held on the website

idont see it effecting credit cards as use of them needs extra information and codes that are not included in information.

but any accounts with the same password are effected ie boards . facebook etc

He won't answer my question on what encryption was used which is worrying.

chinguetti

Every page i click on say 'Error Page 404' and i can't change my password so i've no idea how long this is going to remain like that.

Any one else having the same problem on the website?

Nowso

chinguetti wrote: »

Every page i click on say 'Error Page 404' and i can't change my password so i've no idea how long this is going to remain like that.

Any one else having the same problem on the website?

the racing post login has been disabled for now so its only other sites that you need worry about now

they will send password reset links out when there login is enabled again im sure

Pj!

Hope all the non Racing Post members are not taking advantage and grabbing all the NH stable tours? (They usually charge £9.99 for these...)







They're here...

Panrich

Anyone have any luck trying to ring them on the 016... number from the mail? I'm not getting any answer. I can't access the horse comments on the website (not found, when I try to change from Diomed to Spotlight on customise card).

SRFC

This is some bit of marketing from the rp fair play to them codding everyone but im on to them,make everything free for a few weeks hook a few new customers to sign up after seeing the benefit of using the site,smart move.

mike65

Chance to see if PW is any good these days!

edit - today PW-E Prince Blackthorn wins at 5/1

abarkie

SRFC wrote: »

This is some bit of marketing from the rp fair play to them codding everyone but im on to them,make everything free for a few weeks hook a few new customers to sign up after seeing the benefit of using the site,smart move.

That's some perverse marketing plan!

Cannot really see it working myself :P