

It also downloaded existing nightly full-backups of the database. The account was used to create database backups which were then downloaded and deleted. MyBB admin logs show the account of a trusted but currently inactive member of the forum admin team was used to access the web-based MyBB admin console twice: on 16 February and again on 21 February. This post confirms that a breach has taken place.

In the last 24 hours we became aware of a dump of the Kodi user forum (MyBB) software being advertised for sale on internet forums.

In addition, the Kodi wiki and paste sites are now back online. If you need help while we recover/rebuild the systems, you can find a read-only April snapshot of the forum on the Internet Archive here.
