Published On: Tue, Nov 28th, 2017

HACK ATTACK Imgur admits hackers stole personal email addresses and passwords from 1.7 MILLION customers

HACK ATTACK Imgur admits hackers stole personal email addresses and passwords from 1.7 MILLION customers

Massive data breach in 2014 was only uncovered last week

PHOTO sharing site Imgur has admitted hackers stole the email addresses and passwords of 1.7million people.

The cyber attack in 2014 was discovered only days ago by a security researcher.

Imgur said the hackers did not obtain other personal details such as real names or phone numbers because the site does not ask for them when people open an account.

The hack went unnoticed for nearly four years until the stolen date was sent to Troy Hunt, reports ZDNet.

He emailed Imgur last Thursday – when most US offices were closed for Thanksgiving.

The next day Imgur began asking affected users to reset their passwords and published a warning on its website.

Troy, who runs data breach notification service Have I Been Pwned, said: “That they could pick this up immediately, protect impacted accounts, notify individuals and prepare public statements in less than 24 hours is absolutely exemplary.”

The 1.7million swiped accounts are only a fraction of Imgur’s 150million monthly users.

Imgur’s chief operating officer Roy Sehgal said the company was “still investigating” how the account data was compromised, and added security had improved since the breach.

The login details were scrambled in the company’s database with the SHA-256 algorithm, which could have been cracked. It has since been replaced with the stronger password protector Bcrypt.

Anyone who uses the same email address and password combination on other sites should change them immediately, the firm said.

Last week it was revealed Uber paid hackers £75,000 “hush money” to cover up an astonishing data breach affecting 57million customers in 2016.

Leave a comment

XHTML: You can use these html tags: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>

HACK ATTACK Imgur admits hackers stole personal email addresses and passwords from 1.7 MILLION customers