Adobe Breach Impacted At Least 38 Million Users

[InfoSec News <alerts () infosecnews org>]

http://krebsonsecurity.com/2013/10/adobe-breach-impacted-at-least-38-million-users/

By Brian Krebs
Krebs on Security
OCT 29, 2013

The recent data breach at Adobe that exposed user account information and 
prompted a flurry of password reset emails impacted at least 38 million 
users, the company now says. It also appears that the already massive 
source code leak at Adobe is broadening to include the company’s Photoshop 
family of graphical design products.

In a breach first announced on this blog Oct. 3, 2013, Adobe said hackers 
had stolen nearly 3 million encrypted customer credit card records, as 
well as login data for an undetermined number of Adobe user accounts.

At time time, a massive trove of stolen Adobe account data viewed by 
KrebsOnSecurity indicated that — in addition to the credit card records – 
tens of millions of user accounts across various Adobe online properties 
may have been compromised in the break-in. It was difficult to fully 
examine many of the files on the hackers’ server that housed the stolen 
source because many of the directories were password protected, and Adobe 
was reluctant to speculate on the number of users potentially impacted.

But just this past weekend, AnonNews.org posted a huge file called 
“users.tar.gz” that appears to include more than 150 million username and 
hashed password pairs taken from Adobe. The 3.8 GB file looks to be the 
same one Hold Security CTO Alex Holden and I found on the server with the 
other data stolen from Adobe.

[...]

--
Find the best InfoSec talent without breaking your
recruiting budget! Post a Job, $99 for 31 days.
Hot InfoSec Jobs - http://www.hotinfosecjobs.com/