Adobe Was Hacked

[willie_901]

Recently Adobe's servers were compromised.

http://krebsonsecurity.com/2013/10/adobe-to-announce-source-code-customer-data-breach/

The text of an email I received this morning can be found below.

This certainly does not help promote the Creative Cloud marketing efforts. While the security compromise was not directly related to any sort of Cloud-specific activities, that doesn't matter.



"Important Customer Security Alert

To view this message in a language other than English, please click here.

We recently discovered that attackers illegally entered our network. The attackers may have obtained access to your Adobe ID and encrypted password. We currently have no indication that there has been unauthorized activity on your account. If you have placed an order with us, information such as your name, encrypted payment card number, and card expiration date also may have been accessed. We do not believe any decrypted card numbers were removed from our systems.

To prevent unauthorized access to your account, we have reset your password. Please visit www.adobe.com/go/passwordreset to create a new password. We recommend that you also change your password on any website where you use the same user ID or password. As always, please be cautious when responding to any email seeking your personal information.

We also recommend that you monitor your account for incidents of fraud and identity theft, including regularly reviewing your account statements and monitoring credit reports. If you discover any suspicious or unusual activity on your account or suspect identity theft or fraud, you should report it immediately to your bank. You will be receiving a letter from us shortly that provides more information on this matter.

We deeply regret any inconvenience this may cause you. We value the trust of our customers and we will work aggressively to prevent these types of events from occurring in the future. If you have questions, you can learn more by visiting our Customer Alert page, which you will find here.
Adobe Customer Care"

 

[Sparrow]

... wonderful idea, this cloud thing ... sadly I didn't sign up to it

 

[jsrockit]

It's not cloud related though... if you've bought a download from adobe, you should change your info... at least that's how I understood it.

 

[Kent]

It happens regularly that a website is hacked. Here in Germany we recently had that with a mobile phone company.

All you can do is reset your password and monitor your credit card.
Or refrain from using most of the modern media. 🙁

 

[willie_901]

It's not cloud related though... if you've bought a download from adobe, you should change your info... at least that's how I understood it.

You understand perfectly.

 

[Sejanus.Aelianus]

The problem with all these exploits is that, in my opinion, they shouldn't happen. Mostly they're down to silly mistakes on the part of legitimate users or, worse still, technical staff. If organisations insist on secure passwords, which are regularly changed and if system administrators regularly test their own defences, this would become a rarity.

I kid you not, I once cracked a system admin's password by typing his username in backwards... <sigh>

 

[jsrockit]

I kid you not, I once cracked a system admin's password by typing his username in backwards... <sigh>

I was able to login to a few websites by typing "username" and "password" in the username and password fields... 😀 Hasn't worked in years though.

 

[Pioneer]

If you receive notification from Adobe then one of the accounts hacked is yours. Because of this fact they have automatically disabled your password and have sent you an e-mail notice that you will have to reset your password.

For the rest who have not received this notice we may re-set our passwords at our option.

 

[Murchu]

The problem with all these exploits is that, in my opinion, they shouldn't happen. Mostly they're down to silly mistakes on the part of legitimate users or, worse still, technical staff. If organisations insist on secure passwords, which are regularly changed and if system administrators regularly test their own defences, this would become a rarity.

I kid you not, I once cracked a system admin's password by typing his username in backwards... <sigh>

+1 on human idiocy. You wouldn't believe how many times customer banking information has been compromised here in Ireland in recent years, due to some clown leaving a company laptop with customer information on a train, or some such.

In Adobe's case though, I imagine they have quite a big target on their back, with the way they disgruntled many users in recent years.

 

[Jim-st]

Thanks for the HU willie.

I received no communication from Adobe about this, but after reading your post I logged into my Adobe account and was prompted to reset my password.

So they're not being too pro-active about it, but if you rattle the cage they do respond...

🙄

 

[Kent]

They say that the credit card numbers that were stolen were encrypted.
Which lowers the risk that your card is being misused a lot.

 

[Al Patterson]

Only a small percentage were affected, I read 2.9 million, only those who get an email are in danger of their credit card being used.

There is a much greater risk of losing your idenetity when you go out to eat with your credit card, than with Adobe. But still good idea to change your password and credit card info even if you do not get an email.

Why restaurants in the US do not change to the Canadian system (credit machine brought to your table), where waiters never see your information is a mystery to me.

I am seeing restaurants using iPad Minis and Square doing just that. However, I usually just pay cash...