Operation Sports Forums Data Breach

[Steve_OS]

OS Community,

We are writing to inform you of a security incident that may have affected your forum account information. During a routine security review, we discovered that an unauthorized third party may have gained access to some user account data.

This has only affected a small number of users who will be individually notified. Regardless, this transparency is important to us, and we advise everyone to take the necessary steps below to protect your credentials.

On our end we are taking this matter seriously, and have already taken steps to address the situation.

What Information Was Involved
The following information may have been accessed:

• Username
• Email address
• Password

What We Are Doing

• We have addressed the vulnerability that allowed this access
• We are conducting a thorough investigation
• We are notifying potentially affected users
• We have implemented additional security measures
• We are looking into 2FA for all forum accounts

What You Should Do
1. Reset Your Operation Sports Password Immediately
Visit the password reset page and create a new, strong password:
https://forums.operationsports.com/forums/settings/account

2. Check Other Accounts
If you used the same password on other websites or services, we strongly recommend changing those passwords as well. This is an important security practice whenever any account may have been compromised.

3. Be Alert for Phishing
Be cautious of any suspicious emails or messages asking for personal information. Operation Sports will never ask for your password via email.

4. Monitor Your Accounts
Keep an eye on your accounts for any unusual activity.

Password Best Practices
When creating new passwords:

• Use a unique password for each account
• Make passwords at least 12 characters long
• Include a mix of letters, numbers, and symbols
• We strongly recommend using a password manager

Next, we are looking into implementing Two-Factor Authorization for all forum accounts to better protect your information, including adding this into the OS mobile app.

If you have any questions or concerns, please contact us in the Operation Sports Support Forum or the [#forum-feedback] channel in Discord.

We sincerely apologize for any inconvenience this may cause and appreciate your patience and understanding as we work to protect our community.

As always, thank you for being a valued member of Operation Sports.

Sincerely,
The Operation Sports Team

[Steve_OS]

OS Community,

Here's an update following the initial security notice we posted earlier today with some added clarity on what happened and what the team has been doing to keep the community protected.

The investigation confirmed the issue stemmed from a former third-party developer and affected early versions of the Operation Sports mobile app (1.0.0 through 1.0.4). Their access has been fully removed and the team has taken steps to tighten things up across the board.

Anyone who created an Operation Sports account through the mobile app between September 2 and November 26, 2025 may have been affected. Passwords have already been force-reset for accounts confirmed to be involved. If you signed up through the app during that time, it’s still a good idea to reset the password, even if we haven’t contacted you. To clarify, those who didn’t register for an account during that time frame aren’t affected and don’t need to take any action.

What the Team Has Done

• Terminated the developer responsible
• Rebuilt the mobile app internally from the ground up
• Force-reset passwords for confirmed impacted accounts
• Added extra layers of code and security
• Continuing to investigate all available options regarding the incident

Any communication you receive about this situation that isn't directly from official Operation Sports channels should be ignored, and forwarded to us for investigation.

What Users Should Do

If you attempted to register for an account through the first versions of the app between September 2 and November 26, 2025:

1. Reset your Operation Sports password: https://forums.operationsports.com/f...ttings/account
2. Update that password anywhere else it might have been reused
3. Report any questionable contact to the team

We are committed to keeping everyone informed and doing what’s needed to protect the community.

Thank you.
The Operation Sports Team