I cringe every time I look up an IP address that is trying to repeatedly connect to the game or website and see it's from China or Russia, and I hate that I immediately assume the worst. That shouldn't be my first thought when we have players from all over the world. Then I see the server log and all the attempts to find hidden scripts to run within the website. This is stuff I've been more progressively exposed to as we've moved from server to server and taken on a larger role in the back-end of the game's management.
I'm happy to report that we are far beyond any level of security we've ever had in the past. There are more systems in place to monitor and prevent malicious attacks and some old vulnerabilities have since been cleaned up. We've always backed up all player data to protect against the inevitable successful attack and have had plenty of experience in restoring the game, characters, and forum accounts. Sadly I don't see a situation in the foreseeable future where we (or any corner of the internet) are going to ever be 100% protected. Eventually the game will require full-time management over server security and you could argue it already does, but for now I will continue to make improvements to ensure your data is safe and the world is always stable for everyone to enjoy!