Original Post — Direct link

Make sure your accounts are secured(2fa on email and rs, authenticator, bank pin, unique password). Some more info in these threads.

https://www.reddit.com/r/runescape/comments/h8i13r/possible_database_leak_at_jagex_stay_safe/

https://www.reddit.com/r/runescape/comments/h8hcp5/password_reset_email_influx/

https://www.reddit.com/r/2007scape/comments/h8hk3p/possible_runelite_database_leak/

https://www.reddit.com/r/2007scape/comments/h8h4q7/huge_database_leak_that_happend_lots_of_people/

It seems to most likely have come from a 3rd party client, or somehow maybe Jagex themselves? Hopefully Jagex isn't quiet on this and we learn more soon. Be careful folks.

External link →
over 4 years ago - /u/JagexJD - Direct link

Hi everyone. We're aware of a number of players receiving password reset emails overnight and are actively investigating the reason behind this at present. If you haven't submitted a password recovery request and have received an reset email from us, we'd ask that you please screenshot the email (subject line and all), and send it to [[email protected]](mailto:[email protected]), so we can use it to help the investigation.

Whilst we're investigating (we don't have a timeframe at present, but we're working hard to make it as quick as possible), we'd like at this stage to assure players that an email and account both secured with two-factor authentication will protect your account the best, no matter what the scenario - you can set this up here.

We'll update you all when the investigation is concluded. Thanks for your cooperation!

There's a PSA on our Support page which we'll update if there are any changes.