Adobe data breach: 152.4M accounts exposed
Severity: critical · Patch status: no-fix-needed · Since 2013-12-04
In October 2013, 153 million Adobe accounts were breached with each containing an internal ID, username, email, encrypted password and a password hint in plain text. The password cryptography was poorly done and many were quickly resolved back to plain text. The unencrypted hints also disclosed much about the passwords adding further to the risk that hundreds of millions of Adobe customers already faced. Exposed data: email addresses, password hints, passwords, usernames. The breach dates from Oct 4, 2013; Have I Been Pwned loaded it on Dec 4, 2013.
What to do
- If you had a Adobe account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch
