As an ongoing commitment to security for our internal systems, we regularly run security audits to identify vulnerabilities. Over the weekend we discovered a vulnerability that potentially allowed for SQL injection within the Oculus Developer Center.
When we discovered the vulnerability, we took down our systems as a precautionary effort and applied the required fixes. As an added security measure, we’re requiring all Developer Center users to change their passwords upon next login.
Please know that no credit card or address information is stored in the Developer Center database, and we don’t have any reason to believe that any personal or confidential information was taken before we discovered the issue.
Sorry for the inconvenience and if you have any questions, please email email@example.com
- The Oculus Team