32Pag.es - Site maintenance

In the early hours of January 23rd, the credentials to a lower level staff account on 32p were compromised. These credentials were shared publicly. This account had 2FA enabled, but due to an vulnerability unknown at the time, the attackers were able to bypass 2FA. The attackers logged into the site and vandalized it, deleting items and disabling users. This account DID NOT have access to any database functions or any back end access to the site.

We possess a good backup up from shortly before the attack and will be able to restore the site with minimal data loss. We are investigating how the credentials were compromised. We are also correcting the 2FA exploit that was used in the attack and conducting a full security audit before we bring the site back online. We expect this process to take a few days. We will provide a full update once the site is up and running.

- The 32Pages' Staff ❤️