Software company Zendesk announced yesterday that it discovered a issue security that affected thousands of accounts. The incident occurred in 2016.
Zendesk says it has a lot of customers . Its customer support platform is used by about 145,000 entities in 160 different countries . However, according to the information the company has so far , only 10,000 accounts were affected, and they were activated before November 2016.
The company recently learned of the breach. An investigation was immediately launched, which continues to this day. The results so far have shown that approximately 10,000 accounts were affected. This includes many accounts that have expired or have been inactive for a long time. On the positive side, no accounts that were activated after November 1, 2016, were compromised.
The hackers managed to gain access to databases that contained Zendesk customer data as well as information about people who communicated with these customers through Zendesk services.
The leaked customer information includes names, email, phone numbers, hashed and salted passwords .Security experts investigating the case said the attackers may have also obtained the TLS encryption keys for 700 of the compromised accounts.
Zendesk announced that its BIME, Connect, Sell, and Smooch products were not affected by the attack.
The company has decided to reset passwords for accounts that use the same password before November 2016. The password reset will also affect Guide, Talk and Explore products.
Zendesk, as mentioned above, has hired security experts and notified law enforcement to assist in the investigation. The company will provide more information in the coming weeks.
The company said it had been the victim of an attack in 2013. However, only three customers were affected then.
Zendesk shares fell 4% immediately after the breach was revealed.
