1 min read

Data on 21 million users compromised in Timehop hack

Luana PASCU

July 10, 2018

Ad One product to protect all your devices, without slowing them down.
Free 90-day trial
Data on 21 million users compromised in Timehop hack

Data collected by smartphone app Timehop on its entire customer base of 21 million users was compromised following a security incident, the company confirmed on its website on July 4.

According to their statements, the breach was detected within two hours and 19 minutes, while the attack was still in progress, and only some user data was compromised, including names, emails, a few phone numbers and access keys that linked user social profiles to Timehop.

What led to the breach was a vulnerable cloud computing environment with an account that lacked two-factor-authentication.

“The breach occurred because an access credential to our cloud computing environment was compromised,” reads the statement. “That cloud computing account had not been protected by multifactor authentication. We have now taken steps that include multifactor authentication to secure our authorization and access controls on all accounts.”

The company assures account holders that no messages, financial data, photos or social media posts were compromised in the breach.

“To reiterate: none of your “memories” – the social media posts & photos that Timehop stores – were accessed,” Timehop said. “We have no evidence that any accounts were accessed without authorization.”

Access keys were deactivated and users logged out of their accounts as a preventative measure. The company is collaborating with law enforcement and security experts to reduce impact. Also, they assure users that none of their credit card or financial data has been stored on their servers, nor location data, IP addresses or copies of their profiles and content.

Timehop is a memento collector, it mines user photos and posts from social networks and from Dropbox and resurfaces them online.

tags


Author



Right now

Top posts

The Holiday Guide to Tech Support: Fixing the Family Computer

The Holiday Guide to Tech Support: Fixing the Family Computer

November 24, 2021

2 min read
Bitdefender Celebrates 20 Years of Cybersecurity Leadership

Bitdefender Celebrates 20 Years of Cybersecurity Leadership

November 04, 2021

3 min read
Bitdefender Study Reveals How Consumers Like (and Dislike) Managing Passwords

Bitdefender Study Reveals How Consumers Like (and Dislike) Managing Passwords

October 26, 2021

3 min read
What are drive-by download attacks and how do you prevent them?

What are drive-by download attacks and how do you prevent them?

October 25, 2021

2 min read
Criminals Can't Wait to Add Your IoT Device to Their DDoS Networks

Criminals Can't Wait to Add Your IoT Device to Their DDoS Networks

October 22, 2021

2 min read
Six in 10 Consumers Faced a Cyber Threat in 2021, New Bitdefender Study Reveals

Six in 10 Consumers Faced a Cyber Threat in 2021, New Bitdefender Study Reveals

October 20, 2021

3 min read

FOLLOW US ON

SOCIAL MEDIA


You might also like

Iranian Threat Actor Deployed Malicious PowerShell Script through Phishing, Then Stole Files and Credentials Iranian Threat Actor Deployed Malicious PowerShell Script through Phishing, Then Stole Files and Credentials
Silviu STAHIE

November 26, 2021

1 min read
Ukraine Arrests Five iPhone Hackers of the Phoenix International Hacking Group Ukraine Arrests Five iPhone Hackers of the Phoenix International Hacking Group
Filip TRUȚĂ

November 26, 2021

1 min read
Couple arrested for secretly installing cryptomining software on department store PCs Couple arrested for secretly installing cryptomining software on department store PCs
Graham CLULEY

November 26, 2021

1 min read