A Slay the Spire Fan Expansion: Downfall (Steam Standalone) was Breached.
A Slay the Spire Fan Expansion: Downfall (Steam Standalone) was Breached.
Hello everyone. I bring some unfortunate news today. Yesterday, Christmas Day, at roughly 12:30 PM Eastern time, we experienced a security breach. At roughly 1:20 PM, that breach allowed a malicious upload to overtake our game on Steam's library. Our steam and discord accounts were hijacked, and tho...
This is how you communicate a security breach.
Seriously, 27 hours from when it first happened to report it to users? Especially when most of that intervening time was spent recovering things? That's stellar. We're lucky to hear about corporate breaches in 6 months.
It's also incredibly clear and gives a lot of information on when you do and don't need to be worried. I'd probably take the extra steps to verify I wasn't exposed even if I was in one of the "you're OK" categories, but I appreciate the detail on principle.
It's weird that "we got hacked" is going to get me to try out a mod, but here we are lol.
Yeah that was incredibly incredibly clear
Important info:
-The breach window was roughly 1:30 PM-2:30 PM Eastern (1830-1930 UTC+0) on 12/25.
-Downfall is safe to launch once more, and has been since roughly 2:30-2:40 PM Eastern on 12/25 (1920 UTC+0 on 12/25).
-If you did not launch Downfall in the breach window, you're clear.
-If you got an automatic update for Downfall on 12/25 but did NOT launch, you're clear.
-If you launched Downfall via the Steam Workshop (meaning you actually launched Slay the Spire), you're clear.
-If you did launch Downfall on 12/25 and succeeded and everything looked normal, you're clear.
-If you did launch Downfall on 12/25 and saw a command-prompt like screen, that starting spitting out a bunch of text after about 10 seconds, you're in the clear. That was actually just the Java log which we usually keep hidden, but accidentally left visible when we restored the game.
-If you did launch Downfall on 12/25 and got a 'no .exe found' type of error, you're clear. That was us exploding the game to prevent anyone else from being affected.
-If you did launch Downfall on 12/25 during the breach window and got a Unity library installer popup, please continue to read. You may be also at risk.