Urgent Security Announcement

Earlier this morning, the following post was made to the official Second Life Blog, copied below for your convenience, please be sure to change your password as soon as possible.


>
On September 6 we discovered evidence that an intruder was able to access the Second Life database through the web servers. The exploit was shut down on the afternoon of September 6 when we discovered it.

Detailed investigation over the last two days confirmed that some of the unencrypted customer information stored in the database was compromised, potentially including Second Life account names, real life names and contact information, along with encrypted account passwords.

No credit card information is stored on the database in question, and that information has not been compromised.

As a precaution we have invalidated all Second Life account passwords. In order to log-in to Second Life you will have to create a new password. Please access the log-in page at https://secondlife.com/password, and click on the “Forgot Password” link. An email will be sent to the email address you have registered with us. (Don’t forget to check your spam filter!) Please click through the link in that email, answer the security question, and create a new password.

Second Life passwords can not be changed over the phone at this time. Phone support for password issues will be available Monday, September 11. For the most up-to-date information, please check the Official Linden Blog at blog.secondlife.com

(copied from the Official Linden Blog):

Late last night (early this morning?) the web team completed a change to the code that will give you a few more options for resetting your passwords on the website. If you a) don’t have access to the email address on file with us (or the address doesn’t exist), or b) can’t remember the answer to your security question, read on…

Go to the password change request page and enter your Second Life name. You’ll get a page that says information was sent to your email (Instruction Sent). Choose the link at the bottom of the page that says: Email no longer active? Click here.

You’ll be taken to a new page that will give you several options for validating your account.

If you aren’t forwarded to the new page, or if you are but none of these options work for you, we will have Lindens available on Monday who can help you on the phones.