I was wondering why DTRPG was down on the evening of May 20th, 2022. Then I had the following forwarded to me:
Meredith Gerber (She/Her) — Today at 10:27 PM
MAY 2022 SECURITY UPDATE
In the afternoon of May 20th, 2022, we had a security incident on site that we continue to actively investigate. We have no evidence that any customer account data was compromised.
A third party was able to set prices on titles that they were not authorized to modify, and they set the prices of many titles on site to free which led to some customers placing orders for free titles that were not meant to be free. We shut down the site shortly after this began to happen.
@Publisher & @CC Creator:
We are restoring the site to service, however, for the time being, there will be no access to the normal tool pages to enter or edit titles or to manage bundle titles. We continue to investigate these pages for any security issues and will restore them as soon as we can. Files can still be updated with the normal update file tool page.
Publishers may still use the main publisher hub title search to find and make some edits to titles.
In the coming week, we will analyze any titles that were ordered at incorrect prices and make restitution to publishers and creators whose titles were affected.
We will continue to post messages to Discord, publisher hub, and social media as our investigation continues.
Interestingly enough, there was no mention of this incident on the DTRPG Facebook page.
You can catch the daily Tavern Chat podcast on YouTube - Tenkar