Rock Paper Shotgun is reporting this morning that: “Nexus Mods, the site which has long hosted a gazillion mods for 216 games, particularly Bethesda RPGs – including Fallout 4, which has not yet followed Skyrim to the Steam Workshop. There’s been a possible hack, with some Fallout 4 mod-makers reporting suspicious changes having been made to their uploaded files. Nexus’ owners have established that the breach only affects user registrations up until mid-2013, although that still comprises almost six million accounts and very much covers the Skyrim heyday.”
Basically some un-authorized changes have been made to mods for super popular Fallout 4, which means someone has access that they shouldn’t have and according to Nexus mods them selves these files included the password database. Even if you arent currently using Neuxs Mods, if you had used it in the past its definatly a good idea to change your password as soon as possible.
The Author of sevaral mods including: Rename Dogmeat, and BetterBuild mods say someone other than them made changes to the versions of their mods hosted on Nexus, while site representative DarkOne brought the news of a “potential database breach. it’s too ambiguous to draw any concrete conclusion”,
None the less the site is asking everyone changes their password ASAP. Whoever’s responsible for the breach has access to user IDs, usernames, email addresses for registrations prior to July 22, 2013. Passwords are encrypted – hashed and salted – though it’s not impossible that that could be broken in time. The better news is that Premium member’s payment details aren’t kept anywhere, as they outsource all that to Paypal.
According to the site itself only accounts pre July 22, 2013 should be effected, but staff has said it is a good idea to change your password anyways to ensure it is not an issue. The site is currently down, and the rumor has it its because they are rushing to add in an additional suite of security features for things like two factor authentication. Full details can be found here here , and you can change your password at that link right there.