NationStates confirms data breach, shuts down game site

NationStates confirmed a data breach after a player who reported a bug exceeded authorized testing and achieved remote code execution on the production server via a Dispatch Search vulnerability, copying application code and user data (emails, MD5 password hashes, login IPs, UserAgent strings and potentially some private telegrams). The site has taken the server offline, is rebuilding on new hardware, notifying authorities, and will require password resets once restored.