The popular URL shortener service, bitly, announced that its systems were breached by hackers.
Users who go to the service's website to log in to their account will see a warning at the top of the page stating:
The company has not provided any further details beyond this specific, laconic statement.
If you visit bit.ly/SecurityDetails you will only see the text below that will list details.
“We have reason to believe that Bitly account credentials have been compromised. We have no indication at this time as to which accounts have been compromised. To protect our users, we have taken precautionary measures to ensure the security of all accounts. We have disconnected all Bitly accounts on Facebook and Twitter. All users can reconnect with new passwords to secure their accounts.”
The above announcement seems to be missing a lot of information. What information has been stolen? If someone had logged into a Facebook or Twitter account, are their accounts at risk?
What if someone used the service's API? For all of this and much more, Bitly doesn't provide any answers.
In any case, if you use the service, change your passwords immediately and don't leave it to chance.
