Reddit Suffers Cyber Attack: Personal Data of Millions Compromised in Major Security Breach

Reddit announced that it had suffered a cyberattack, which allowed hackers to get their hands on various data. But the online platform ensures that this does not concern user data, which is apparently safe.

Reddit’s systems were hacked by a “sophisticated and highly targeted phishing attack” on February 5, 2023. Hackers sent “invitations that look plausible” redirecting employees to a site that cloned Reddit’s Intranet network behavior . As a result, attackers were able to steal credentials, and tokens, for two-factor authentication.

After an employee fell victim to the phishing attack, hackers were able to break into internal systems to gain access to some internal documents, source code and some business systems. The online platform guarantees that the hack did not affect its main system, the one where Reddit’s heart and most of its data is.

Reddit says it learned of the hack after the employee reported the incident to the company’s security team. After investigating the incident, the website says the stolen data included limited contact information for current and former company contacts and employees. The data also included some details about the company’s advertisers, but credit card information, passwords and ad performance were not accessed.

Reddit gave no details about the phishing attack, but it did reference a similar attack used to hack Riot Games. During this attack, hackers broke into Riot Games and stole the source code for the League of Legends (LoL) online battle arena, the fighting game Teamfight Tactics (TFT), and an old anti-cheat platform. The gaming company then received (and denied) a $10 million ransom demand to keep the data undisclosed. The hacker then tried to auction the League of Legends source code for 10 million on a hacker forum.

Reddit Suffers Cyber Attack: Personal Data of Millions Compromised in Major Security Breach

Newer Articles

Older Articles