Ubiquiti Networks, the well-known manufacturer and seller of networking equipment and IoT devices, sent emails to its customers to notify them of a recent security of its systems.
"We recently became aware of unauthorized access to some of our IT systems , which are hosted by a third-party cloud provider," Ubiquiti said in emails.
The servers, which were compromised, were used to store information about user for account.ui.com, a web portal available to customers who purchased one of its products.
Essentially, this portal is used to manage devices from a remote location as well as to provide help and support.
According to Ubiquiti emails, the attackers gained access to data , such as names, email addresses, and salted and hashed passwords .
Information such as home addresses and phone numbers may also have been exposed, but this information may not be much, as not all users add it to the web portal.
yet known how many Ubiquiti users were affected by the breach, nor is it clear which cloud provider was targeted or when the attack occurred.
On the positive side, Ubiquiti said it has not detected any unauthorized access to customer accountsfollowing this data.
However, the company is asking all users who receive the notification email to change their account passwords and enable two-factor authentication, just in case.
When the first emails reached customers, some thought they were a phishing attack. However, a Ubiquiti technical support representative confirmed on the company's forum that the emails were genuine.
Below, you can see the email sent by Ubiquiti, as circulated on social media:
Source: ZDNet
