Re: *** ADMIN: Security breach at IMGUR.COM

On Sat, 2017-11-25 at 16:06 -0600, Bradley Stone wrote:

"On November 23, Imgur was notified of a potential security breach that
occurred in 2014..."

2014? It's in the article more than once.. is that a typo or did it really
happen that long ago?

Yes, it does seem that it was that long ago.

Most of the breaches that get reported tend to be reported years after
the event. The main reason seems to be that the data eventually gets
noticed some time after the breach, usually after it has gone through
the hacking community and been mined and has finally ended up on a more
generalised release site or, as in this case, some researcher (or white
hat) has noticed it and informed the company.

Oddly in this case, their "we have been hacked" article has been
released very quickly. Usually companies tend to take months and months
before they finally admit (if ever) to an issue in public (or only when
someone else has broken the story, so they go into damage limitation
mode and finally stick their hands up to the issue). So you have to give
them some credit for a speedy, one day turnaround, response - that is
quite impressive.

Jon

Bradley V. Stone
www.bvstools.com
GreenTools for Microsoft Apps <https://www.bvstools.com/g4ms.html>: Easy to
use interfaces for sending and receiving Email as well as OneDrive!

On Sat, Nov 25, 2017 at 2:50 PM, David Gibbs <david@xxxxxxxxxxxx> wrote:

Folks:

I've been recommending to people that need to post screen shots to the
list that they use the IMGUR.COM service.

I just noticed that IMGUR.COM has suffered a security breach.

https://blog.imgur.com/2017/11/24/notice-of-data-breach/

At the very least you should probably change your password on that service.

david

--