According to the American business magazine Fast Company, the personal information of its Executive Board members was not stolen in the cyberattack that forced it to shut down its website.
See also: Fast Company hack: Hackers send racist message via Apple News
The Fast Company Executive Council is a network of founders, executives, and leaders who can connect with their peers and publish on FastCompany.com.
However, it confirmed that the threat actor behind the attack was able to steal affiliate credentials and put them up for sale onlineafter breaching its content management system.
“ Malicious actors downloaded usernames and passwords of Fast Company associates and made the information available for purchase on a website called Breach Forums ,” Fast Company said in an alert
“Fortunately, Fast Company's Executive Board members' information is protected in a separate database. Members' personal information was not compromised in the cyberattack.“
See also: New npm timing attack will lead to supply chain attacks
The Fast Company website came back online and began operating again on Wednesday, according to the same notice.
While the company said it hired a leading global cybersecurity incident response firm to help investigate the attack, it has yet to share additional details about last month's incident.
This notice follows a two-week shutdown of Fast Company's website, after the hacker also posted racist notifications to readers' mobile devices via Apple News .
Fast Company took the website offline, which also displayed messages like: “Hacked by Vinny Troia. [redacted] tongue my [redacted]. Thrax was here.,” instead of the usual headlines.
See also: Thermal attack: Guesses password by detecting heat
Following the incident, Apple also disabled Fast Company's channel on the Apple News service to prevent similar incidents.
Thrax, the member of the group that carried out the attack, also claimed to have compromised the site's CMS after allegedly bypassing Fast Company's WordPress HTTP basic authentication with the help of a very easy default password used for dozens of accounts .
