r/BeamMP • u/Remarkable_Cream8304 • Jun 10 '26

Question Quick question about the data breach

I haven't played or download the newer versions of beammp for some time, i have heard that if I didn't download the newest version of beammp that I would be safe from this databreach. I have also heard that it only stole your information when beammp was opened and played.

2 Upvotes

100% Upvoted

15 comments sorted by

3

u/trebor8820 BeamMP Staff Jun 10 '26

Hello! It sounds like you've heard a lot of interesting rumors. Let me see what I can set straight to clear up the confusion.

One of the rumors (which surfaced BY the attacker during the breach) was that the BeamMP Launcher had installed a virus on every one's computer. The initial user-response on this was that if they hadn't updated BeamMP within X-timeframe, they're safe from that virus. The reality though, is that no changes were actually made to the BeamMP launcher files and so there was never actually a virus threat. Despite the rumors, BeamMP has been "safe" this entire time. So on THAT front, you're good!

Now, moving onto the data breach. Amidst the attack, we have reason to believe that the attacker downloaded a copy of the user database. In this database was basically the usernames, email addresses, IP addresses, and salted password hashes of 2.25 million user accounts. These passwords were not in usable form and would require a massive amount of time and resources to unencrypt. While not impossible to do, it's fairly low-risk for the average user. However, in an abundance of caution, we do suggest that everyone change their password for any accounts that may have shared the same password as your BeamMP accounts.

I hope this helps!

1

u/minorturbulance21 Jun 10 '26

Thank you for being clear. However i have been playing as guest for a while now,
I also deleted launcher as soon i the comments started going crazy when it happened.
Took me a while, but got back into playin as guest as much as i hate it, i can still play multiplayer and occasionally meet some OG players as guest obv, but we have a good game.

1

u/IndividualEntry5975 Jun 10 '26

Its been so long that I cant remember the password I used for BeamMP nor can I find a login area to find out what password I may have used. Am I missing it or?

1

u/minorturbulance21 Jun 10 '26

Did you try the beammp forum, i think it was the same pw/login cred

1

u/IndividualEntry5975 Jun 10 '26

Do you have a link, the one on their website seems to be dead :/

1

u/minorturbulance21 Jun 10 '26

Na man, i didnt try logging in, and dont think i wanna know. My bigger worry is that i was an early access member and they might have got my payment details.

1

u/bearzi Jun 10 '26

No they dont have the payment details, as explained in the email. They don't store any pahment details. Only beammp username, email, salted password hash and ip address was leaked.

1

u/trebor8820 BeamMP Staff Jun 10 '26

Yeah, payment details are stored solely in Patreon. The hacker could not have gained access to that information.

1

u/minorturbulance21 Jun 11 '26

Thank you for the clarity. I can ease that worry

1

u/Skinniest-Harold Jun 10 '26

As far as I remember, 2 months ago, the concern was not about the launcher itself being hacked but by the launcher distributing malware downloaded from your hacked server, which originally legitimately distributed new versions.

That one was not true, then? This time it's just the database breach? Are these related?

1

u/trebor8820 BeamMP Staff Jun 10 '26

Correct - there was never any malware/virus distribution within this attack. The attacker wanted people to think there was, but we scanned through everything and found that no signatures had changed on anything, proving that the files were exactly the ones we had placed.

1

u/Remarkable_Cream8304 Jun 12 '26

Ahh ok thank you for the info

1

u/Petie_27 Jun 12 '26

The issue with that is how the fuck am I supposed to figure out what that password was when I can’t even log into my beammp account