Reddit Data Breach! Hackers gain access to user data & email addresses!

Online Community site, Reddit, informed its users that the company’s servers were breached by hackers, who had gained access to user data. The data breach was accomplished by successfully bypassing or circumventing the SMS based authentication on Reddit servers.

The hacker was able to obtain information about some current email addresses and a backup database from 2007 which contained old salted hashed passwords.

The data breach occurred between June 14 and June 18 of which the company learned about on June 19. The attacker was able to compromise a few employee accounts with the company’s cloud and source code hosting providers. The Company has its primary access points for code and infrastructure behind strong authentication that requires two factor authentication (2FA).

The attacker gained read-only access to some of Reddit systems that contained source code, backup data and other logs. This was a serious attack on the Reddit systems and if the attacker had gained write access, the consequences would have been worse.

Read Full Article Click Here