On Decemberber 26th, Tycoon Online was hacked. The MD5 hash of your passwords were exposed to the hacker. There is no way to reverse the MD5 hash except by guess and check. For example, if your password is "password", the MD5 hash is 5F4DCC3B5AA765D61D8327DEB882CF99 So if you have used a common password, the hacker can check a list of common passwords and their MD5 hash and find your password. Therefore it is recommended that you click on the "Retrieve your log in information" link in the login screen to get a randomly generated password.
If you have used the same password for any other website, it is recommended that you also change those passwords. (Even if you are not using a common password)
Unfortunately it's because of the age of the code base this was not something we could have foreseen. Changing passwords is advised as precaution all password on TO are encrypted
We can not apologize enough and are doing everything in our power to make sure this does not happen again