Spreading FUD?  Maybe they are just people who are genuinely annoyed with mtgox for spreading their passwords and email addresses all over the internet.  And fuck knows what financial information got into the wrong hands.

Maybe MT should make his mind up whether they were hacked or compromised by their own 'auditor' instead of vacillating between the two stories based on whichever he imagines have lesser legal consequences.

My details were leaked, before this I had no problem with MtGox. Now I think they are fucking idiots and deserve everything they get. No FUD, no agenda or axe to grind. I have my own security precautions so I am not all that bothered by the leak but I can see why some are.

If you stand on the backs of giants you should know that it will be a long fall when you lose your footing.

They didn't leak your data. It was stolen.

Are you really that retarded that you don't understand the difference?

Ok... so by comparsion, was Sony banking cards scandal a leak or "just data stolen" from poor poor Sony?

Even Reuters calls Sony heist "data leak", and the situation seem similar - someone hacked in and stolen the database - but perhaps they don't know shit, or perhaps this situation is totally different.

So sure - please explain to us this difference - why you say mtgox users database getting into Internet was not a data leak. perhaps I'm wrong.

http://www.reuters.com/article/2011/04/28/us-sony-stock-idUSTRE73R0A420110428

The data was stolen from MtGox (who are liable due to neglicting to take proper security measures) and then leaked by the hacker.

I and other people have lost money as a direct result of his incompetence. You can't expect him to come on here and get a heros welcome.

I am really amazed by the weak arguments that some people here use to defend the indefensible.
First of all, arguing about semantics? Is that the best you can do? Who the hell cares if it is leaked or stolen, the end result is the same: our private information which was trusted to MtGox has been exposed publicly. If MtGox couldn't protect a breach that is easily preventable, then it is a GROSS NEGLIGENCE.

If the attackers used 0-day exploits, then it might be classified as "Force Majeure" (I better not give them ideas, no? lol)
In any case, a SQL attack is always preventable. And the choice of using MD5 for password hashing, shows very poor judgement.
It is evident that they tacitly acknowledge their poor judgement because one of the new security measures is to hash them with Sha-1.

This is a very clear example of hacking exploiting negligence.
And it is pathetic that they are not being upfront, honest and transparent to what happened to them.
They had all our trust to begin with, an honest declaration would have been quite understandable. They had all our support.

Now they are eroding all the trust with all these stupid, stupid, childish and pathetic lies.

• "no, no, it wasn't hacked, it was an auditor... we are not responsible" W T F
• "no, no, it wasn't SQL" (er.. it was.)
• "no, no, it wasn't CSRF" (it used to be exploited, and some report that were still exploited.)
• "eeer... no, it... err... Lionel Hutz help me out here... oh right, it is 'Force Majeure'"