In case there is anyone in the iRacing world who has not heard the news, in a recent update shared by @Musantro on X (formerly Twitter), it has been revealed that more than 270,000 usernames and passwords have been exposed in a data breach affecting Trading Paints. This platform is widely utilized to design and access personalized liveries on iRacing. Senior DevOps Engineer, Nicholas Bailey, has officially confirmed this incident on the iRacing forums.
As of the current moment, Trading Paints has neither released an official statement acknowledging nor refuting the breach. Despite this, the Trading Paints team, which is relatively small, has not provided a response to Traxion.GG’s inquiry for commentary.
Expressing concern over the absence of a public notification, Tim Wheatley, the proprietor of Race Sim Central and the Head of Licensing for Straight4 Studios, shared, “I’m somewhat perturbed by the absence of any public communication. However, I have personally validated the data, as my former password is part of the sample currently displayed on a hacking auction website.” This statement was shared by Tim Wheatley on X.
As of the current moment, Trading Paints has neither released an official statement acknowledging nor refuting the breach. Despite this, the Trading Paints team, which is relatively small, has not provided a response to Traxion.GG’s inquiry for commentary.
Expressing concern over the absence of a public notification, Tim Wheatley, the proprietor of Race Sim Central and the Head of Licensing for Straight4 Studios, shared, “I’m somewhat perturbed by the absence of any public communication. However, I have personally validated the data, as my former password is part of the sample currently displayed on a hacking auction website.” This statement was shared by Tim Wheatley on X.
I have said it since 2013 and I’ll say it again: It is beyond high time for iRacing to dump Trading Paints. I’ve always wondered why iRacing doesn’t handle access to the paints of others within their own software. The Trading Paints software has been unstable for the last 3 months and now we have this data breach. Additionally, I’ve never been able to find any contact info on the Trading Paints website. That’s a terrible policy for any website of any kind, anywhere. Now personal email addresses and passwords have been stolen from the Trading Paints database due to their own negligence, and all we hear from Trading Paints is crickets. That is inexcusable.