Tuts+ Premium Security Breach & The Marketplaces

Due to the recent security breach on Tuts+ Premium, many of you may be wondering about the safety of your personal information on the Envato Marketplaces.

We would like to assure you that Marketplace passwords are all encrypted to protect your personal data. The Marketplaces do not store passwords as plain text.

A reminder though: if your Marketplace password is the same as your Tuts+ Premium password (or if you can’t remember your Tuts+ Premium password), you should change your Marketplace password immediately. The same goes for any other sites where you use that password.

If you have any questions, feedback or concerns – please ensure you have read the Envato Notes article regarding the breach, and contact Support who will be more than happy to assist. Thank you.

Hey Jordan, how much of an impact do you think this will have on Marketplace authors in terms of sales? Seems like a lot of the Tuts+ members are frustrated and angry, are there are a lot of them who were buyers or potential buyers?

johnnybd said
Hey Jordan, how much of an impact do you think this will have on Marketplace users? Seems like a lot of the Tuts+ members are frustrated and angry, are there are a lot of them who were buyers or potential buyers?

Hey Johnny. Certainly there is an understandable level of frustration from our affected users. We use encrypted passwords on the Marketplaces and no data has been compromised here. We’re going to keep everyone informed about the situation, will be transparent and are urgently working to fix the issue and do our best to make sure it doesn’t happen again.

Good luck guys, you’re going to have a pretty crappy week – but Envato will get through this.

I guess we’ll just have to wait and see what this does to Tuts+. You guys really think you’ll have it back up within 48 hours of the notes blog post? Are you not allowing the devs to sleep at all?

Did envato have plans to implement a more secure login for the marketplace in the near future or do you wait for the marketplace to be hacked and then provide the update?

sorry but I can’t put this question less harsh than this, there are months, maybe years that authors requested a fix for this security problem.

doru said
Did envato have plans to implement a more secure login for the marketplace in the near future

Hi doru. This is in relation to the tutsplus website which is completely different to the marketplace login system. More information is available on notes here: http://notes.envato.com/general/tuts-premium-security/

dtbaker said
Hi doru. This is in relation to the tutsplus website which is completely different to the marketplace login system.

Sorry, I will not allow this. Don’t deflect my question, I need an answer to this issue.

And is not “completely different” as you say. That website is owned by envato and probably was maintained by the same developer team as those who build&support this marketplace. Correct me if I’m wrong on this.

doru said
That website is owned by envato and probably was maintained by the same developer team as those who build&support this marketplace. Correct me if I’m wrong on this.

They are distinct teams

charliesome said
They are distinct teams

That is a relief

Uf, serious thing, sorry to hear that. Envato must take this very serious not only now, also for future attacks.

Envato reputation is serious thing; of course when you are big you will receive more attacks and envies, but here are many professionals involved, and many live due to Envato earnings.