We believe that the manner in which the information was released exaggerates the gravity of this vulnerability, to the detriment of Horizons and its community. We would like to reassure subscribers and potential customers alike that Horizons account information and PayByTouch billing services are secure and that the vulnerability described in the article allows for only individual account exploits. The vulnerability requires foreknowledge of account information, e.g. a valid username and password. In no way does this open private customer information to outside parties, nor does it allow the Horizons game servers to be affected. 

  The only significant potential abuse of this exploit is the bypass of normal billing procedures. However, we can track exploiters easily and will permanently ban anyone found abusing this exploit. We will harshly and promptly deal with any deliberate and malicious abuses of the Horizons game systems and services. To that effect, all accounts which are active and not being billed at this time will be deactivated and given the benefit of the doubt, and the chance to resubscribe correctly. After this point in time, any accounts found to be active and not billed will be banned permanently. This does not apply to military and properly created comp accounts.

  The earliest documented report of this security exploit was in April of 2006 and it was neither mentioned nor referenced in the documentation that accompanied EI’s acquisition of Horizons. We were given notice in August of the existence of the vulnerability and began researching fixes to the system. Since that time, other issues have taken priority. We are addressing resources to the issue now, however, and it will be fixed in the near future. It does not represent a threat to in-game affairs, and we'd like to stress again that sensitive subscriber information is secure and protected.