Cyber Risks · Krebs on Security

Facebook Warns Users After Adobe Breach

Summary: Facebook began warning users whose email and password combinations appeared in Adobe's 2013 breach data, asking them to change passwords and answer additional security questions. Adobe initially reported nearly 3 million encrypted credit card records stolen, later said it notified more than 38 million users, while Krebs reported the breach may have affected closer to 150 million accounts, and experts said Adobe appeared to use a single encryption key for all leaked credentials.

What's compelling: Facebook matched the leaked credentials by running the plaintext passwords researchers had already cracked through its own login hashing code, which means the exposure at one vendor became an account-takeover risk at another - and with a single encryption key protecting the whole Adobe database, cracking one password helped expose the rest.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related