Additional information includes PII affected and the authentication issue that led to the breach.

Dark Reading Staff, Dark Reading

July 12, 2018

1 Min Read

Timehop, the company that specializes in "digital nostalgia," is releasing more information on the July 4 breach that compromised millions of users' personally identifiable information (PII). New details include the timeline of the attack, the information affected, and the steps the company has taken to remediate the issue and prevent its recurrence.

When Timehop first announced the breach, it revealed that the names and email addresses belonging to some 21 million users were illegally accessed, along with phone numbers belonging to about 22%, or 4.7 million of them. Now Timehop has released the total numbers of accounts that provided some combination of name, email address, date of birth, phone number, and gender designation to the attacker or attackers.

The company has also provided details of the authentication issue that led to the breach: It says that the account used to access the data did not have two-factor authentication enabled. Timehop now says it has required multifactor authentication on all such accounts.

Timehop has provided great transparency into the attack, its effects, and the steps being taken in its aftermath. While all customers will have to reauthenticate the service to their social media accounts (a result of authentication tokens being compromised), customers are also encouraged to learn about what happened to understand how they might be affected.

Read more here.

Horizontal-334031_BH_US18_banners_468x60_non_1.png

 

 

 

Black Hat USA returns to Las Vegas with hands-on technical Trainings, cutting-edge Briefings, Arsenal open-source tool demonstrations, top-tier security solutions and service providers in the Business Hall. Click for information on the conference and to register.

About the Author(s)

Dark Reading Staff

Dark Reading

Dark Reading is a leading cybersecurity media site.

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.

You May Also Like


More Insights