Reddit Suffers Data Breach Affecting Only A Small Number of Users
Reddit today revealed that back in June, it suffered a information alienation where hackers got access to some non-sensitive data including former databases, and other technical stuff including internal logs, configuration files, employee information, and the website's source code. The company has now concluded its investigation over the matter and has issued some advice for users.
While the breach was discovered on June 19, it is expected to have taken place between June fourteen and 18. Reddit CTO Chris Slowe aka u/KeyserSosa posted in the announcements subreddit, detailing the likely cause and touch of the breach.
Slowe revealed that the systems which stored this information were protected by SMS-based ii-gene authentication and "the main attack" took identify through interception of 2FA SMSes. This is why Slowe insists that every user must prefer token-based 2FA, which tin be accomplished using apps such every bit Google's Authenticator.
The hacker just gained read admission to Reddit's servers and was unable to modify whatsoever of its internal files. Further, Slowe added that Reddit has taken certain steps to "lock down and rotate all production secrets and API keys" also as make the logging systems more than secure.
The data that was stolen includes the usernames and "salted" or modified passwords from 2007 and before. While the likeliness of users not having changed their passwords since 2007 is very depression, Reddit said that information technology will be conveying the potentially affected users via a private message and/or email.
The hackers also stole the list of emails of the users who have subscribed for regular updates or email digests from Reddit. Since the emails also comprise usernames which ways that if yous're one of the recipients, make certain you turn on 2FA for your account to prevent information technology from existence sabotaged. Here's how to do information technology.
Reddit will also be prompting yous to update your countersign in case in that location is a possibility of your credentials being stolen. Meanwhile, Slowe recommends every user to switch to token-based hallmark instead of SMS verification.
Source: https://beebom.com/reddit-suffers-data-breach-affecting-only-a-small-group-of-users/
Posted by: bennetttommand.blogspot.com
0 Response to "Reddit Suffers Data Breach Affecting Only A Small Number of Users"
Post a Comment