Reddit's Been Hacked - Here's How to Check if It Hit You

Reddit's Been Hacked - Here's How to Check if It Hit You

Reddit's Been Hacked - Here's How to Check if It Hit You

Since June 19, we've been working with cloud and source code hosting providers to get the best possible understanding of what data the attacker accessed.

Even if Reddit doesn't force you to reset your password, doing so anyways is a good idea just to make sure all of your bases are covered.

Reddit noted that the hacker only gained "read-only" access instead of "write access" in their company systems, meaning the backup data and source code, as well as other logs, were not accessed.

"This is personally identifiable data that's been exposed in what is unequivocally a data breach, why on earth wouldn't you notify people?" said renowned security researcher Troy Hunt, a specialist in data breaches affecting consumers.

This includes a complete copy of an old database backup of Reddit user data from the site's launch in 2005 through May 2007.

How to tell if your information was included: We are sending a message to affected users and resetting passwords on accounts where the credentials might still be valid.

Furthermore, two-factor authentication is something that everyone should be using by now.

"We learned that SMS-based authentication is not almost as secure as we would hope", wrote Mr Slowe.

Hungarian GP: Max Verstappen and Red Bull unhappy with Renault
It's a shame to have missed out on that. "That is valuable points thrown away". Verstappen conveyed his grievances rather more colourfully.

The attackers would only be able to do this if they could intercept the SMS codes, either by hacking the Signaling System Seven (SS7) that wireless carriers refuse to fix, even when called out by members of Congress, or by social engineering the porting of the Reddit employees' phone numbers to the hackers' own phones.

The hackers, however, were able to intercept those text messages. We've reached out to Reddit for further clarification.

What was accessed: Logs containing the email digests we sent between June 3 and June 17, 2018.

"The digests connect a username to the associated email address and contain suggested posts from select popular and safe-for-work subreddits you subscribe to", Reddit added.

The one limiting factor with security keys is that relatively few Web sites now allow users to use them.

Not all users receive the email digest, but for those signing up in the U.S., the feature is switched on by default. Its global user base is 330m - similar to Twitter. Nor would the person provide a figure for how many users were receiving the email digest at the time of the breach. Here's what steps it says users should take: "If your account credentials were affected and there's a chance the credentials relate to the password you're now using on Reddit, we'll make you reset your Reddit account password".

The company also did not respond to a follow up question asking for more details on how it plans to inform users directly about the risk.

Recommended News

  • Steam Game That Used Players’ Computers to Mine Cryptocurrency Removed

    A game published on Steam has been accused of mining cryptocurrency without user consent, Eurogamer reported . Which a user traded for under the assumption that it wasn't, well, worthless.
    Three people arrested for massive Chipotle, Arby’s, Chili’s hacks

    Three people arrested for massive Chipotle, Arby’s, Chili’s hacks

    A prolific hacking group behind hundreds of cyberattacks on restaurants just lost its leaders, says the US Justice Department. Hladyr was allegedly a systems administrator for FIN7 who maintained the cybercrime group's servers and communications.
    Urban Meyer Knew Of Ex-Assistant's Domestic Violence History

    Urban Meyer Knew Of Ex-Assistant's Domestic Violence History

    In an interview with McMurphy, Courtney reportedly said she and Shelley regularly talked about Zach's abuse in 2015. Smith obtained a restraining order shortly after the incident but charges were never filed.
  • England move one step closer to official bid for 2030 World Cup

    England won the only World Cup it has ever hosted in 1966 but lost with bids for the 2006 and 2018 competitions. That would make the 2030 World Cup the next one a European nation might be able to host, and not before.
    Real Madrid Brazilian wonderkid Vinicius Junior lauded after debut against Manchester United

    Real Madrid Brazilian wonderkid Vinicius Junior lauded after debut against Manchester United

    The Welshman's career in Madrid has been blighted by injury and occasional dips in form, which saw him become a bit-part player last season under Zinedine Zidane .
    Bernd Leno says it’s ‘crazy’ to be lining up alongside Petr Čech

    Bernd Leno says it’s ‘crazy’ to be lining up alongside Petr Čech

    According to the veteran goalkeeper, Leno must brace himself for an entirely different challenge in the English leagues. I do my best, I work every day very hard and at the end the coach has to decide".
  • N Korea 'making missiles' despite U.S.  thaw

    N Korea 'making missiles' despite U.S. thaw

    This intelligence has been backed up by satellite images that appear to show activity at a known uranium-enrichment facility. Nauert said that North Korean officials would be at some of the same meetings as State Department officials in the area.
    More than 350 people report getting sick from Chipotle

    More than 350 people report getting sick from Chipotle

    It came after an outbreak of E. coli hit the chain in 2015, resulting in numerous people getting sick across the United States. In June, Chipotle announced it was closing down as many as 65 underperforming restaurants across the world.
    Willian Fails To Report For Chelsea Training Amidst Real Madrid Rumours

    Willian Fails To Report For Chelsea Training Amidst Real Madrid Rumours

    If we can't, though, we'll keep hold of him until his contract expires and allow him to leave the club on a free transfer. Chelsea know they'll need to spend big following other goalkeeper moves in the transfer market this summer.
  • Alex Jones Wants Sandy Hook Parents to Pay His Legal Fees

    It's not enough that he's exposed them to death threats and harassment that has led them to move homes seven times . A gunman killed 20 young children and six adults at Sandy Hook Elementary School in Newtown on December 14, 2012.
    House Candidate Calls First Lady 'Hoebag'

    House Candidate Calls First Lady 'Hoebag'

    The House candidate in question is Mark Roberts , an Independent running to represent Oregon. Apparently the founder of Twitter did not agree with their concerns, however.
    Watch Dwayne Johnson Surprise His Stunt Double With an Amazing Gift

    Watch Dwayne Johnson Surprise His Stunt Double With an Amazing Gift

    Thank you so much", Reed says. "I mean, this is a small token of my appreciation", Johnson tells the camera. He also represents an entire Hollywood stunt community that is truly the backbone of our business'.

We are pleased to provide this opportunity to share information, experiences and observations about what's in the news.
Some of the comments may be reprinted elsewhere in the site or in the newspaper.
Thank you for taking the time to offer your thoughts.