Betcoin.ag has not been hacked but just a target of a pretty elaborate phishing scheme for which we have developed an email security verification system which will be further explained in the next post and Betcoin.ag will never ask you for your password or to download anything via an email anytime. Thank you.
How did the people who sent the phishing emails know the player's screennames? Wouldn't they need access to Betcoin's internal database for that kind of information?
By "Screenname" you probably meant "Username".
Screename are public (your name on a poker table) and Username should be private (name you're using to log-in), only the site and your affiliate, if you have one, should know about it.
Well, it doesn't work like that on Betcoin; Usernames are not private at all there.
Just click on "p2p" on a player's page and here you go, his username is given !
Even easier, just write a post on the forum and then you got some notifications about who answered to the thread... well, inside the notification it is not the screenname of the player that is given but his username...
That is obviously a security issue in itself; maybe that's one which is inherent to WPN, I don't know (not sure how the p2p do work on the other skins).
But that doesn't answer as to how someone could get, not only the username, but as well the correct email linked to Betcoin for some players.
Apart Betcoin being hacked, I can't see how it is possible and that would explain the mandatory password change in late December as well as to other issues that faced some players with accounts being hacked like this story:
https://bitcointalk.org/index.php?topic=1315681.0;all