Hello all. I'm paying a visit today, and this topic got pointed out to me. Just to make sure things are down straight, I'm going to post my account of how things went even though this case is apparently closed. (And if this topic was closed, my apologies - as an admin, it's not easy to tell.)
On April 1st, 2006, Scardino was placed in a special user mask that had access to the Admin Control Panel (ACP). This was as part of an April Fool's Joke where it was to appear as though LWU had taken over the forum, with Flemingovia and myself as accomplices. Flemingovia mentioned to me that allowing Scardino access to the Admin CP could be dangerous, and I immediately removed said access after being reminded of this. Unfortunately, the warning I should have known to begin with came too late. Scardino took the opportunity to make an unspecified change to his account (which did not have an affect on his access rights), as well as copy the entire text of the member log, which includes IP addresses and emails in an uncensored format. This information was presumably stored at some secure location on the LWU forums, for counter-intelligence usage against any possible spy attempts from the NPA or NPIA.
The list, and this breach of security, went unknown until during the conflict with the Lexicon, where the list was posted in a secure portion of the Lexicon's forum by Limitless Events. The list was quickly screenshotted by Shoeless Joe and sent to myself and Flemingovia. We confirmed, through the use of the more updated member log, that the list had come from the TNP forums. When confronted, the list was immediately removed (deleted) from the Lexicon forums, upon threat of the involvement of InvisionFree. A small amount of further investigation led us to the date and the identity of the person who took the list. When confronted about the situation, Scardino informed us to the original intent of the list and said he had no knowledge that Limitless Events was intending to do with the list. Due to the outdated nature of the list, it had largely fallen into disuse by the LWU, and was largely ignored. Several IP addresses, my own included, had changed several times since the list was taken. However, there were enough that had not changed to pose a security threat. The LWU copy of the list was destroyed thereafter. To our knowledge, no copies of the list currently exist, except for the current one in the Admin CP.
I did not disclose Scardino's involvement in this at the time for a few reasons. Firstly, his crime had been committed over a year ago, and any retribution against him would have been a moot point. Except for the April 1st incident, Scardino had never held any form of security clearance on this forum that would allow him access to confidential information. Limitless Events, on the other hand, had limited access to IP addresses, and expressed an interest in attaining higher office within TNP. Furthermore, Scardino only intended for the list to be used for in-game purposes (counter-espionage, as previously mentioned), did not intend to allow the list to go beyond LWU, and access to that list was only given to a few trusted members. While this certainly does not excuse his crime, and although his trust was clearly somewhat misplaced, his actions after the fact and his intentions were genuine and well-intentioned. To punish him for this act of goodwill would be morally wrong, to my mind.
So, in the end, there are three guilty persons for this incident:
Myself, for permitting the situation to happen in the first place by a gross lack of judgement;
Scardino, for abusing the position granted to him in what was intended to be a joke only; and
Limitless Events, for posting confidential and private information in a clear violation of trust and rules.
Flemingovia, while privy to this situation, is not guilty of anything except possibly not stating all this sooner, my second crime. He made an effort to put a stop to this and did not grant Scardino access as I did. Bear him no ill will over this situation.
While this should have been done ages ago, I fully apologize to any who may have been injured through this incident. I realize that this probably violates any trust that was held for me, and I fully accept that, as it is certainly deserved. At least it is now all out in the open, although it seems you lot figured most of it out yourselves already. For which I again apologize.