Quote from: spyjai on June 15, 2011, 08:08:21 AM

URGENT NOTICE

When I tried logging in this morning to btcguild.com, I realised I couldn't do it. I then tried logging in mtgox.com as well with no success. I then tried logging in my gmail account which is tied to both mtgox and btcguild, and realised the password has been changed. I recovered my gmail password, which then I reset my btcguild.com password. When I log in to btcguild, I found that my email address has been changed (my prior email address with a "1" appended at the end of it, eg originally xyz@gmail.com became xyz1@gmail.com), as well as my payout address has been changed. Luckily, I had payout lockout enabled so the hacker could not retrieve the funds yet. As of this moment, I'm still unable to recover my mtgox account password. I've sent in a help request through the support forum to freeze all my assets asap and I'm now waiting for their reply.

I urge everyone to change their mtgox and/or btcguild passwords asap, there may be some security vulnerabilities in either of these sites or my computer. I'm not sure whether I've been hacked or what, but everyone please becareful.

edit:

I still cannot change my email address back to my original gmail account, because I cannot change my email address within 24 hours, that means the hacker could still have access to my account via the new email address to change passwords. eleuthria if you are able to read this please check your pm. I have sent you my account name. Please disable all payouts until further notice.

edit2:

The username and email I use for btc / mtgox are the same, although the passwords are different. The email also happens to be the same as the one used in this forum. I realised that I got hacked after I made a few posts on the bitcoin forums, I don't know whether the two are related.

edit3:

eleuthria, do you keep logs of the wallet ids that were changed? During the panic, I changed the wallet ID back to my own wallet without first noting down the wallet of the hacker. It would be useful to know the hacker's wallet id at least, to see if anyone else has been similarly hacked and had their bitcoins sent to that address.

How can so many people get hacked? Do you use passwords like 123 or what? Damn.