Keys Dissapearing...Answered

I've been using LimeLM for about 6 years.

Today we encountered some very big problems. 

3 of our customers' licenses are dissapeared by ITSELF. 
I didn't delete them, my password is very strong, i wasn't hacked or so…

I was logging the serial key' first 25 chars into log file when our app is starting. This is how i could manage to recover the keys for you to check.

If I remember correctly This key AVJX-JWY3-5JDB-RKWJ-KRDJ had 7 activations, and it is completely GONE now. 

This key is dissappeared too..  VTP8-BFHG-7G7T-2S59-B2IB

This is one of my colleague's key. This computer is in OUR office. => M9H4-TFZM-IDZZ-AV5U-9QAY

What's happening?

Answer

Those aren't the format of any key our software generates. If you're using another licensing product (internal or otherwise) check that.

I think didn't read my message correctly...
 

I was logging the serial key' first 25 chars into log file when our app is starting. This is how i could manage to recover the keys for you to check.

Those are the keys generated from your sorftware, I managed to find one of the missing keys => M9H4-TFZM-IDZZ-AV5U-9QAY-WYZW-NITA

I've managed to recover the keys from our old backups.

=> AVJX-JWY3-5JDB-RKWJ-KRDJ-P3V2-JWTA
=> VTP8-BFHG-7G7T-2S59-B2IB-KSWV-5WTA
 

, edited

The only time we remove data is when fraudulent accounts are created. But in those cases the whole account and all associated user are removed from the system (and either temporarily or permanently banned).

Remove all users from your account except you. Enable 2fa. Also change all API keys (they have the same access as you to your account). See more here: https://wyday.com/limelm/help/account-security/

I'm your paid user since 2016, i've no fraudulent account, i was the only one who uses this account at the time this issues happened and i'am not using APIs. I've 278 keys with 419 activations.

I am pretty sure that my account WAS NOT accessed by someone else, because i've a pretty strong password. If someone was accessed my account, i think they'd delete all the keys. Not 3 of them. Right?

My point is, i want to learn what happened to these 3 keys. I'm sorry but, i am not that dumb to delete 3 production keys accidentally. It is clear that something happened, but not by me. 

My request is, could you please tell me how these license keys were deleted/vanished/dissapeared ?

I think you have all the necessary logs, backups, and if you do a little research, you will see that i am right...

AVJX-JWY3-5JDB-RKWJ-KRDJ-P3V2-JWTA
VTP8-BFHG-7G7T-2S59-B2IB-KSWV-5WTA
M9H4-TFZM-IDZZ-AV5U-9QAY-WYZW-NITA

* Btw, i wasn't using 2fa since today, and i added new user AFTER this issues happened.
 

We didn't remove any keys.

Btw, i wasn't using 2fa since today

Enable it as soon as possible.

Also, reset your API key. Set the number of allowed IP addresses for the API key to 0 if you're not using it.

I believe you, you didn't remove any keys. Why would you anyway.

Yesterday we thought that only 3 license keys were missing, but today we received a phone call and learned that there were more. All of the keys below were activated more than 2 YEARS ago (13.10.2021 to be exact). And now, they are completely gone.

My request is, PLEASE, check your logs and tell me how these keys were deleted. I think, you have audit logs

Btw, client logs says,  IsActivated  returns TA_OK, IsGenuineEx returns TA_FAIL.

HEIK-GSKQ-2CVM-UTZ9-ZEZ9-CJF4-R2TA
GUMJ-PBHE-EQCR-G37R-8VK6-HS8N-S6TA
GKUG-AFJW-747U-PV63-6SEU-IJF2-PITA
ZXBB-9HB4-4AZ8-7G43-D3XS-VPS5-Z6TA
ANGC-AHYV-9H25-UXQ3-9CSU-MIIQ-3ATA
YBIR-TZCJ-873Z-XDYM-5ET7-H38G-ZETA
RMSM-VW8G-B8MF-MT52-P9U7-W7GB-PITA
39QK-CQ59-C5ZB-TQZH-WS4J-2P9C-86TA

, edited

We store many logs regarding access to our systems, however we don’t retain “states” or logs of normal account activity.

We’ve had no unusual activity.

One of a few things happened:

1. You removed the keys.

2.  someone with access to your credentials did

3. You had “free” LimeLM accounts that we’ve removed. Or you had “paying accounts” that never had a successful payment (we remove these accounts too).