After breach, Stack Overflow says some user data exposed

After disclosing a breach earlier this week, Stack Overflow has confirmed some user data was accessed.
In case you missed it, the developer knowledge sharing site confirmed Thursday a breach of its systems last weekend, resulting in unauthorized access to production systems the front-facing servers that actively powers the site. The company gave few details, except that customer data was unaffected by the breach.
Now the company said the intrusion on the website began about a week earlier and a very small number of users had some data exposed.
The intrusion originated on May 5 when a build deployed to the development tier for contained a bug, which allowed an attacker to log in to our development tier as well as escalate their access on the production version of, said Mary Ferguson, vice president of engineering.
This change was quickly identified and we revoked their access network-wide, began investigating the intrusion, and began taking steps to remediate the intrusion, she said.
Although the user database wasnt compromised, we have identified privileged web requests that the attacker made that could have returned IP address, names, or emails for some users.
The company didnt immediately quantify how many users were affected. Stack Overflow has 10 million registered users. Weve asked for clarification, but spokesperson Khalid El Khatib did not immediately comment
Affected users will be notified, said Ferguson.
Stack Overflows teams, business and enterprise customers are on separate, unaffected infrastructure, she said, and theres no evidence that those systems were accessed. The companys advertising and talent business is said to be unaffected.
In response to the incident, the company terminated the unauthorized access and is conducting an extensive audit of its logs to gauge the level of access gained by the attacker.
Read more:

An unsecured SMS spam operation doxxed its owners

Samsung spilled SmartThings app source code and secret keys

Security lapse exposed a Chinese smart city surveillance system

A leaky database of SMS text messages exposed password resets and two-factor codes

Chipotle customers are saying their accounts have been hacked

We found a massive spam operation and sunk its server

Dow Jones watchlist of 2.4 million high-risk individuals has leaked

Robocaller firm Stratics Networks exposed millions of call recordings

Massive mortgage and loan data leak gets worse as original documents also exposed
See also:
Leave a comment
  • Latest
  • Read
  • Commented
Calendar Content
«     2020    »