Imgur hack: A few days later the Uber admission for a data breach that took place in 2016, and affects 57 million customers, the also popular image sharing website revealed it fell victim to hacking in 2014.
Email hacking and passwords from 1,7 million user accounts have been compromised since the Imgur breach.
In one publishing on the blog of the company, Imgur claims to have been notified of the breach three years ago on November 23, when a security investigator sent them an email containing stolen data.
Imgur's Chief Operating Officer (COO) then notified the company's founder and vice president before starting to confirm the data.
Following the completion of the data validation, the company confirmed on Friday morning that the 2014 data breach affected approximately 1,7 million Imgur user accounts (a small portion of the database containing 150 million users) and that the information included only email addresses and passwords.
This is because Imgur did not ask for real names, phone numbers, addresses or any other personal identification information.
The company said the stolen passwords were encrypted with an old SHA-256 hash algorithm, which can be easily cracked by brute force attacks.
However, Imgur COG Roy Sehgal said the service no longer uses the SHA-256 but a much more powerful password scrambler bcrypt from last year.
The company has already started informing the affected users and requires them to change their password, while still investigating how the hacking occurred.
Security expert Troy Hunt, who briefed Imgur on the incident, said technicians acted immediately after the breach was reported.
George is still wondering what he is doing here….
