Racing post website hacked

*folks.

https://twitter.com/brucemillington

- Racing Post ‏@RacingPost 7m

"The emails sent to http://racingpost.com  members regarding the security of our website are authentic and sent from us."

Tommy Toes • November 23, 2013 9:46 PM GMT
- Racing Post ‏@RacingPost 7m

"The emails sent to http://racingpost.com  members regarding the security of our website are authentic and sent from us."
Report• Quote • Block User Alias • November 23, 2013 9:54 PM GMT

Thing is though Tommy Toes, I received one and haven't even got an account with them though.

The ironic thing is: I haven't had to log on to use the Racing Post site for at least 2-3 years after they did one of their 'upgrades', so never do.

Which also shows woeful security by them for a long time.

Haha!

I don't know then, thebandit.

I do, however, remember that when I first joined the RP they had a direct link page to Betfair betting pages when it was a much simpler site. I always used to use that rather than Betfair - as it was 'all in one'.

Perhaps the sites were interlinked then?
I really don't know.

Despite our best efforts, the security on racingpost.com has been breached over the last 36 hours, in a sophisticated, sustained and aggressive attack. One of our databases was accessed and customer details were stolen.

Security is an area we take extremely seriously and our website has not been compromised previously. As soon as we were aware of the situation we did everything in our power to halt the breach. We have now established that a number of customer accounts were accessed. Although all the passwords are encrypted, we believe that there is still a chance that some passwords can be deciphered. As yours is one of the accounts involved, there is a risk of identity theft. Please be aware that we do not store your credit card details on our website and these have not been the subject of any theft.

As part of our efforts to resolve the issue, we have turned off the ability to register / log-on to racingpost.com. You will still be able to access the site safely. Members' club content will also be available.

However, we are contacting you now to request that you take all precautions and reset your passwords on any other site which uses the same password as the one you use on racingpost.com as soon as you can. If, for example, you use the same password for your bookmaker accounts, email accounts or for social media we advise you to reset them. Mine is one of the accounts involved and I will be changing my passwords. We understand how inconvenient this is - and can only apologise for any difficulty this causes - but feel it is necessary under the circumstances.

Once we are totally satisfied that using your account details on racingpost.com is completely secure, you will need to reset your password on our site. We will send you an email with instructions on how to do this. For security reasons, there will be no links on the email. You will need to visit the racingpost.com website to make the changes. For now, please proceed with changing your passwords (if the same as your racingpost.com password) on any other site.

If you have any questions, please contact Racing Post customer services on 01635 246505.

Please be assured that we are currently reviewing all of our security measures and will put in place even stronger protection to stop this happening again. Extensive changes have already been made overnight with the assistance of industry-leading cyber-security experts.

We are extremely sorry that this unfortunate incident has occurred and thank you for your patience and understanding.

We will be in touch in due course once we have re-established the registration / log-in part of the site.

Yours faithfully


Bruce Milllington
Editor

exactly

we are currently reviewing all of our security measures and will put in place even stronger protection to stop this happening again

password = password (nap)

getting lots of spam recently wonder if it is from these clowns weak security

same with me. virtually never use the site, cant remember my password. so no idea if i use that password elsewhere. what a fecking joke.

Same as thebandit: got the e-mail last night despite never being a member of the site.

Who exactly is hacking whom here?

Racing post website now has a message

Racingpost.com
security breach

Stringent new measures are currently being put in place to prevent a repeat of the security breach that has affected racingpost.com.

The website was the subject of a sophisticated, sustained and aggressive attack on Friday and Saturday, in which one of our databases was accessed and customer details were stolen.

Customer credit and debit card details are not stored on the site and have therefore not been accessed and are not at risk.

Usernames, first and last names, encrypted passwords and email and customer addresses were taken. As a consequence, customers have been advised by email that they should take the precaution of changing their password on other sites if it is the same one that they use for racingpost.com.

Customers who are unsure of their password should be aware these are encrypted and we are therefore unable to tell them what the password is. Our advice, if in doubt, is to change passwords on other sites as a precaution.

Customers who use R acing Post products to place bets can be assured all bets are placed directly with bookmakers and that we hold no details whatsoever in relation to their betting accounts. It remains perfectly safe to bet on our website and mobile and tablet products.

Racing Post editor Bruce Millington said: "Security is an area we take extremely seriously and our website has not been compromised previously. As soon as we were aware of the situation we did everything in our power to halt the breach.

"As part of our efforts to resolve the issue, we have turned off the ability to register / log-on to racingpost.com. You will still be able to access the site safely. Members' Club content will also be available.

"We are extremely sorry that this unfortunate incident has occurred and thank you for your patience and understanding."

Customers with any questions are requested to contact Racing Post customer services on 01635 246505.

if the passwords were encrypted. how com the hackers can erm unencrypt them but the racing post cant? are the hackers that much more technologically adept than they are? not surprising they got hacked then is it?

if the passwords were encrypted. how com the hackers can erm unencrypt them but the racing post cant? are the hackers that much more technologically adept than they are?

The bad guys may well be better techies but the point is they will try to decrypt them. The Racing Post would not want to.

RP know the salt, so they would have a head start

yes, been done now a few times, sony, adobe, racing post. Might have to change emails as I am getting spammed to death

If you have any questions, please contact Racing Post customer services on 01635 246505.

Lazy **** aren't even picking up the phone