Slack Resets Passwords For 1% of Its Users Because of 2015 Hack

'Slack published more details about a password reset operation that
ZDNet reported earlier today. According to a statement the company
published on its website, the password reset operation is related to
the company's 2015 security breach. In March 2015, Slack said hackers
gained access to some Slack infrastructure, including databases
storing user credentials. Hackers stole hashed passwords, but they
also planted code on the company's site to capture plaintext passwords
that users entered when logging in. At the time, Slack reset passwords
for users who it believed were impacted, and also added support for
two-factor authentication for all accounts. But as ZDNet reported
earlier today, the company recently received a batch of Slack users
credentials, which prompted the company to start an investigation into
its source and prepare a password reset procedure. "We immediately
confirmed that a portion of the email addresses and password
combinations were valid, reset those passwords, and explained our
actions to the affected users," Slack said. In a message on its
website, Slack said this batch of credentials came via its bug bounty
program. The company said it initially believed the data came from
users who had their PCs infected with malware, or users who reused
passwords across different services.'

-- source: https://tech.slashdot.org/story/19/07/18/1610221

Yep, been one of them...

Cheers, Peter
-- 
Peter Reutemann
Dept. of Computer Science
University of Waikato, NZ
+64 (7) 858-5174
http://www.cms.waikato.ac.nz/~fracpete/
http://www.data-mining.co.nz/
_______________________________________________
wlug mailing list | [email protected]
Unsubscribe: https://list.waikato.ac.nz/mailman/listinfo/wlug