On the 1st of August Reddit announced a data breach where users email information was compromised. Reddit stated that they became aware of the hack on June 19thand that is had occurred sometime between June 14thand 18th. They are currently undergoing an investigation to figure out what other information could have been compromised and are following appropriate measures to ensure a hack like this does not happen again.
According to Reddit, “Although this was a serious attack, the attacker did not gain write access to Reddit systems; they gained read-only access to some systems that contained backup data, source code and other logs. They were not able to alter Reddit information, and we have taken steps since the event to further lock down and rotate all production secrets and API keys, and to enhance our logging and monitoring systems.”
Although it is not clear yet the exact data the attacker accessed, two discoveries were made. 1) All Reddit information from 2007 and before including account credentials and email addresses were compromised, and 2) All email digests sent by Reddit in June of 2018 were compromised.
Reddit suggests users to double check their data to verify if it falls under the two categories above and to reset your account password. Additionally, If you discover your email address was affected and there is sensitive information linked to your account that you want deleted you can find instructions on how to do so here.
For more information please call (650) 762-8545 or fill out a form below!