Włam na imgura - zmieńcie hasła...

Imgur wykrył, że w 2014 ktoś im zrobił wjazd do bazy . Wcześnie jak cholera... Anyway, jeśli macie tam konto radzę pozmieniać hasła na wszystkich stronach, gdzie używaliście takich samych danych logowania.

 

Informacja jaką rozesłano poniżej:

Cytat

 

We are writing to inform you about a data security issue that involves your Imgur account. We have taken steps to secure your account.

What Happened?

On November 23, 2017, we were notified about a data breach that occurred in 2014. Based on our analysis, we believe that an unauthorized third party stole user account data from us. You are receiving this email from us because your information was compromised. While we are still actively investigating the intrusion and no suspicious activity has been detected since the start of the investigation (the breach was in 2014), we wanted to inform you what we know as quickly as possible.

What Information Was Involved?

The stolen account information included your email address and password from 2014. As you know, Imgur has never asked for real names, addresses, phone numbers, or other personally-identifying information (“PII”), so the information that was stolen did NOT include such PII. We have always encrypted your password in our database, but it may have been cracked with brute force due to an older hashing algorithm (SHA-256) that was used at the time. We updated our algorithm to the newer Bcrypt algorithm last year.

What Steps Are We Taking?

We are immediately requiring all potentially affected users to update their password. You will be logged out of your account on Imgur and you will need to reset your password to sign back in.

What Can You Do?

If you used the same password for other sites and apps, we urge you to update them immediately. We recommend that you use a different combination of email and password. Finally, please always use strong passwords.

 

We take protection of your information very seriously and will be conducting an internal security review of our system and processes. We apologize that this breach occurred and the inconvenience it has caused you. If you have questions, we encourage you to contact us at support@imgur.com.

Sincerely,
Muts Inayama
VP Engineering, Imgur

 

 

Rychło w czas się zorientowali. Ja osobiście mam krócej konto. 

 

Swoją drogą jak to ma się do tych - zaloguj przez fb i innych?

Nijak, te sposoby autoryzacji nie podają facebookowego konta stronom zewnętrznym - to działa na trochę innych zasadach. Tak czy inaczej zdrowo jest zmieniać hasła co jakiś czas u korzystać z dwuskładnikowej weryfikacji jeśli jest taka opcja.

Ja też na szczęście korzystałem wtedy z innego hostingu ... ostatnio coraz więcej wypływa takich incydentów lol