If you’ve recently responded to an e-mail from Mojang asking you to confirm your account details, please read on. Because you might be glad you did.

Mojang have confirmed that phishers, who get private account details from people usually by imitating official channels be they ‘human’ or site-based, have posted the details of around 1,800 Mojang account details with usernames to a forum for phishers. Mojang have now contacted everyone whose details were on that list, so go check your e-mails – if you’ve been contacted change your password now. If you’ve not been contacted you don’t need to change your password, but it might be a good excuse to do so if you’ve not for a while.

Either way, Mojang have force reset the affected accounts so you’ll need to change the password anyway the next time you log in. So no worries, your account will not be gone if you’ve no time to log in for a while.

Mojang have released a blog post with the amusingly captioned graphic below briefly explaining what has happened, assuring us that no one’s hacked them so there’s no need to worry. Only a lesson to be learned – never trust an e-mail asking you to confirm account details even if it looks legit.

Mojang site “Let’s talk about password security”: [x]