The officials from Reddit have confirmed a data breach in their network. This data breached occurred during 14th to 18th of June. As per their reports, the personal Reddit accounts of their employees, the source code hosting providers as well as cloud services were compromised. The two-factor authentication System of users was affected by the help of SMS interception. During this data breach, the account access of the Reddit employees was controlled by cyber-criminals. Whenever an employee tries to access their account, they have to confirm their identity with unique one-time code which is sent to their device. However, during this period, the cyber-criminals managed to reroute the message containing unique code to their devices.
As per the officials, the cyber-criminals were not able to post or write anything to the website but they did manage to read the data of the users. Reddit is taking this matter seriously and is considering this as a severe attack.
According to experts who are closely watching this whole data breach incident, the attackers may link the username with their associated emails. So, there is a high risk that the real identities of users may get exposed. As per reports, the cyber-cribbers have managed to get access over the encrypted password from multiple servers. These servers were containing credentials from as early as 2007. The Reddit officials have already started to inform all the users whose personal data may have been exposed.
What Next for Reddit? (Token Based Authentication SMS)
Reddit is working hard to ensure that their other securities measures could not get bypassed by the criminals. They have informed about this data breach to the law enforcement agencies. As a new security measure, they have shifted text-based SMS authentication to token authentication. The company has also improved the logging process. They have ensured to use more advance encryption system for data protection. With over 330 million users world-wide, it is very important to ensure the privacy and data security for each one of them.