The Hive Updates logo

Updates

Back to Homepage Subscribe to Updates

Labels

  • All Posts
  • feature
  • notification
  • new game
  • game update
  • change
  • maintenance
  • small change roundup
  • Fix
  • SkyWars
  • treasure wars
  • murder mystery
  • just build
  • hide and seek
  • deathrun
  • survival games
  • seasonal content
  • block party

Jump to Month

  • May 2023
  • April 2023
  • March 2023
  • February 2023
  • January 2023
  • December 2022
  • November 2022
  • October 2022
  • September 2022
  • August 2022
  • July 2022
  • June 2022
  • May 2022
  • April 2022
  • March 2022
  • February 2022
  • January 2022
  • December 2021
  • November 2021
  • October 2021
  • September 2021
  • August 2021
  • July 2021
  • June 2021
  • May 2021
  • April 2021
  • March 2021
  • February 2021
  • January 2021
  • December 2020
  • November 2020
  • October 2020
  • September 2020
  • August 2020
  • July 2020
  • June 2020
  • May 2020
  • April 2020
  • March 2020
  • February 2020
  • January 2020
  • December 2019
  • November 2019
  • October 2019
  • September 2019
  • August 2019
  • July 2019
  • June 2019
  • May 2019
  • April 2019
notification
a year ago

Weekend Maintenance Breakdown

Last weekend, we were informed about an exploit affecting us and some other (featured and non-featured) servers, which allowed users to log in with an arbitrary identity. As this posed a possible security risk, we went into maintenance mode and resolved this issue ASAP.

As of this announcement, we believe the issue has been resolved. We have reached out to other affected servers in the community, as well as affected software maintainers, to aid them in resolving this issue.

We have no evidence that this exploit was used maliciously. The Hive stores no personal data, so there is no risk to players in any form. 

As there was no impact to player accounts, we are under no obligation to post this notice, however we're sharing this to promote transparency and to assist affected networks.

We have rewarded the people that informed us about this exploit with a generous bug bounty.

This incident was limited to server logins, due to the way Minecraft client issues and validates logins, and not any backend service or web services such as Discord or our forums.

FAQ:

Is my account at risk? Should I change my password?

No. This incident has no relation to passwords, and as it’s been resolved, there is no risks for any accounts. Absolutely NO action is required by any user at this time.

Was my account affected?

From our current evidence, this affected less than 10 accounts, mainly vanity and known influencer accounts. There was no substantial abuse of the affected accounts. No player account was banned, kicked, or modified because of this incident.

Did this affect all servers?

This affected a small number of featured servers as well as several non-featured servers, as well as popular Bedrock to Java translation servers. Most affected servers have since resolved this issue.

Was the Hive “hacked”?

No. The scope of this incident was purely related to in-game access, and the number of privileges that in-game accounts have is incredibly limited as well as audited. No personal, account, or other privileged data was accessed or modified.

Avatar of authorThe Hive