2020-03-30 Request to Change Your Password

http://en.toram.jp/information/detail/?information_id=5203


2020-03-30

Request to Change Your Password Due to Unauthorized ASOBIMO Account Login Attempts by the Method of "List-Based Account Hacking (Credential Stuffing)"


Thank you very much for playing and staying loyal to Toram Online.

We have confirmed unauthorized ASOBIMO Account login attempts on several accounts by malicious third parties using the method of "List-Based Account Hacking (Credential Stuffing).

It is a method of attempting logins on a certain app or website using the user ID and password that may have leaked from other apps, websites, etc.
We sincerely apologize for any inconvenience and anxiety caused by this issue.

We would like to share and announce what we have learned about this issue so far and how we will deal with it.

Details

We confirmed unauthorized login attempts starting from March 25, 2020 (Wed) while monitoring user access.

Handling

Toram Online Customer Support will reach out to affected users individually via "support@toram.jp".
We are also enhancing our monitoring system to counter other fraudulent accesses.

Furthermore, we will also recover as many characters and items as possible that were lost due to the unauthorized access.
However, please kindly understand that certain data are very difficult or impossible to recover due to the game system.

Request to Users

In order to prevent unauthorized login attempts to your ASOBIMO Account, please kindly confirm the following information.

1. Do not use the same password on different sites.
2. Do not use easily guessed password.

It is assumed that the unauthorized login attempts happening this time are being carried out with the "List-Based Account Hacking (Credential Stuffing)" method using the user ID and password that may have leaked from other apps, websites, etc.
Therefore, if the same password is also being used on other sites, there is a possibility that your account will be targeted by hackers.
Using different passwords on different sites is one way to prevent Credential Stuffing Attack.
This matters to not only the users we are individually reaching out to, but also to those using the same user ID and password on different sites. If you belong to the latter, please change your password immediately.
We take this problem seriously as protecting your private information is our top priority.
We will improve our monitoring system to prevent unauthorized logins and do our best to maintain a safer and more secure environment for our players.

For inquiries regarding this matter, please feel free to contact us using one of the following methods.

If you are able to log in to Toram Online

In the top left corner of the screen, tap Menu > Orb Shop > Contact Us

If you are unable to log in to Toram Online

Visit Toram Online Official Site (https://en.toram.jp/), scroll down and click "Contact Us".

 

before you blow a shit shitstorm:
this is a user-made problem, not a security fault of Asobimo.

 

Yeah, so many new players are getting scammed. But, I don't honestly know who is making money from this game now. The number of daily users is dropping and unique accounts made is very low.

I think we passed peak Toram 2 years ago.

Gg, it was fun

 

... I actually use the same password for all 3 of my toram accounts.

 

lol same I use the same password for pretty much everything, usually the only difference is a few numbers added on the end

 

My data got found and I got my account restricted because someone attempted to log in from a different country