Update: Jagex has issued an announcement stating that no credit card or banking data was lost as a result of the breach. "Further to RuneScape gold yesterday's announcement, we could confirm that none of our players' card or bank details were jeopardized," it said. "We operate with an industry-respected, fully compliant third party payment processor, to intentionally avoid staff having access to gamers' full bank or card details. This also applies when players decide to save their information at payment stage for any future purchases. Jagex undergoes regular, third-party testing to make sure we keep the highest security standards"
A couple of months ago, an Old School Runescape player who goes by mazrim_lol on Reddit claimed that a"serious data breach" had caused him to shed 45 billion coins on his main accounts. His claims were dismissed by numerous different players, several of whom suggested that it was his own fault for not having the account properly secured, or he may be lying around it completely. However, it came to light now he wasn't lying, and that he was right regarding the data breach, which was actually an inside job at Jagex. "We confirm that a Member of The Old School Team has been dismissed from employment at Jagex following gross misuse of moderator privileges," Jagex said in a statement posted now. "During our rigorous routine system checks, irregular activity was identified on small number of reports, including the movement of riches and objects back to the live match "
"Following our investigation, we were able to solve the problem prior to any significant impact was made to the wider game, or economy. We have also taken steps to return items and GP to any accounts that are affected. Whilst we do not return items or stone, we feel this odd situation, we wanted to guarantee no players lost out into the rogue actions of a member of team ."
Jagex added that it's"working with the authorities" regarding the episode --45 billion coins has considerable real-world value--but said it couldn't provide further details. However, in accordance with this Resetera thread that the employee in question is Jed Sanderson, aka Mod Jed, who may actually have stolen in excess of 100 billion coins in total, worth over $100,000 on gold-selling markets. He's also allegedly involved with the Reign of Terror clan, which has been accused of using DDoS attacks to impede competitions in tournaments, including a $20,000 tournament that occurred in September of this past year. Jagex said in the time that its investigation had found no evidence of wrongdoing from Sanderson, but in the wake of all this I anticipate it will be taking another look.
In a followup article, Mazrim_lol shared a picture of a message he received from Jagex Player Support, telling him that, because of the"rare situation" of this situation, it has made a decision to restore his lost wealth. "We take matters in this way very serious and, as such, we would like to assure you that we've taken measures to cheap RS Gold ensure that an incident like this will not happen again," Jagex wrote. Thankfully, Mazrim_lol is taking his vindication graciously:"All the redditors who'd spent ages telling me I had been only lax with safety can suck a fat one," he wrote.