Reddit announced that its systems were hacked in mid-June 2018. The company says that the email addresses of most of the service’s users were compromised, as well as some of the passwords from an old data backup from 11 years ago.
According to Reddit, the hack took place between June 14 and June 18, when a hacker managed to compromise the accounts of several employees who used two-factor authentication (2FA) via SMS.
The attacker was able to access old forgotten salted passwords from a 2007 database backup and the current email addresses of some Reddit users.
Reddit confirmed that the email addresses found in the hacker's hands were through some log files stored on its servers between June 3 and 17, 2018.
The company also says that the hacker was able to intercept Reddit's source code, internal log files, and configuration files.
Read the official announcement, and change your passwords immediately.
______________________________
- Mark Zuckerberg: data from 2.2 billion users has been leaked
- OpenPGP SigSpoof vulnerability in popular email applications
- FlightSimLabs Greek steals passwords from hackers
- PassProtect: Addon that warns you about insecure passwords
- Have I Been Sold service informs if your email has been sold
