While RacingRulesOfSailing.org sees attack traffic every day, today was particularly bad. A series of IP addresses in the same overseas range targeted the site with spoofed requests and SQL injection attempts. Our logs show several thousand attempts using a wide variety of techniques.

We responded by hardening the affected endpoints — request parameters that reach the database are now strictly validated against known-good values — and by expanding our automated blocking of abusive IP addresses. And we have added tests to make sure these protections stay in place.

Our review of the logs found no evidence that any non-public data was accessed. But we want to reiterate that there are parties actively attempting to acquire data from our events. Please be careful with your user names and passwords, and don't share them with anyone.