Citing Attack, GoToMyPC Resets All Passwords
Summary: GoToMyPC, the Citrix-owned remote access service, forced a system-wide password reset for all users on June 19 after what it called a very sophisticated password attack. Citrix product line director John Bennett said the incident was a password re-use attack in which attackers used usernames and passwords leaked from other websites to access GoToMyPC accounts, and that there is no indication Citrix or its platforms were compromised.
Key Takeaway: The credentials that opened remote control of customers' PCs came from breaches at other sites, so the exposure sat in accounts Citrix never controlled and could not see. Citrix reset every password, including accounts already protected by two-step verification, which shows how far a re-use attack can reach once leaked lists are in circulation.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026