Luanti (formerly Minetest) hit by ContentDB security breach

An attacker gained unauthorized access to ContentDB, the official repository for Luanti (formerly Minetest) mods and games. Usernames, emails, bcrypt2 password hashes and IP addresses of recent downloaders were exposed, and the attacker used internal configuration to sign into a staff account and run commands in a Docker container.

• Breach began on 22 October; full server command access confirmed on 26 October
• Exposed data includes emails, bcrypt2 password hashes and IPs from two weeks prior
• Attacker exploited two vulnerabilities, one in a third-party component
• Uploads checked against backups show no changes, but tampering isn't ruled out