Dear All Clients,
It has come to our attention that we've had a databreach on the WHMCS side of our panel. WHMCS stores information on the User ID, First Name, Last Name, Email Address, Password (Hashed, passwords cannot be decrypted, only cracked if you had an insecure password), Last IP, Account Created Timestamp, Account Updated Timestamp, Email Verified At and the last 4 digits of any credit cards stored with us.
This databreach occurred through a WHMCS theme known as "Lagom". This theme has, unbeknownst to us, had an exploit within it for quite some time. This allowed malicious actors to install Remote Shell software and remote database software upon our server. We've taken the required action to mitigate this, identify the weak points, and we are working on bringing up the WHMCS panel, albeit this may take a while as we are properly securing everything down again.
Unfortunately, we are not the only host to have suffered an attack like this. Attacks against this theme have occurred before to other hosts.
We will be taking the necessary action to report this to the correct UK government departments (NSCC and so forth).
Any questions regarding this, feel free to open a ticket and we'll be happy to answer any concerns.
We are extremely sorry for this breach,
Staff Team @ EUGameHost LTD