Hmm
This PolyMC stuff kinda making me not trust any of the 3rd party launchers now lol.
TheCJBrine
what exactly got compromised? The tweet's wording is weird: Was it the keyring that handles their connection to mod databases like CurseForge and Modrinth? ...Or were they storing account credentials? 'Cause, uh, that's very not legal if they were; usually if a company allows a 3rd party launcher, they allow access to their APIs so that the fan launcher doesn't do any real interaction with your info (at least that's how I THOUGHT it worked...).
EDIT: I looked into it a bit, it was their metadata server and update server. Still, always a good idea to change passwords just in case lol.