Windows 10: Data of 2.4 million Blur password manager users left exposed online

Borg 386 · Jan 5, 2019

Abine, the company behind the Blur password manager and the DeleteMe online privacy protection service, revealed on Monday a data breach impacting nearly 2.4 million Blur users, ZDNet has learned.
Click to expand...

According to Abine, the file that was left freely accessible online contained various details about Blur users who registered before January 6, 2018. Exposed information included:

Each user's email addresses

Some users' first and last names

Some users' password hints but only from our old MaskMe product

Each user's last and second-to-last IP addresses used to login to Blur

Each user's encrypted Blur password. These encrypted passwords are encrypted and hashed before they are transmitted to our servers, and they are then encrypted using bcrypt with a unique salt for every user. The output of this encryption process for these users was potentially exposed, not actual user passwords.

The company stressed that no passwords stored inside users' Blur accounts were exposed.

"We do not have access to your most critical unencrypted data, including the usernames and passwords for your stored accounts, your autofill credit cards, and so on. As frustrated as we are right now, we are glad that we have taken that approach," said Abine.
Click to expand...

Abine is now urging users to change their Blur master password and enable two-factor authentication for their account.
Click to expand...

Data of 2.4 million Blur password manager users left exposed online | ZDNet

:)

Borg 386 · Jan 5, 2019

Password manager OneLogin hacked, exposing sensitive customer data

A week after OneLogin disclosed it had been hacked, the company's security chief has said that thousands of its customers may have been affected -- but admitted that it still has a lot to learn about how it was breached.
Click to expand...

OneLogin is similar to a password manager, but also manages the identities and login information of enterprise and corporate users -- from hospitals, law firms, financial giants, and even newsrooms. OneLogin acts as a central sign-in point to allow its customers -- which includes millions of staff and end users -- to access their accounts on other popular sites and services, like Microsoft and Google accounts.

At the end of last month, the company announced news that nobody wants to hear.

An attacker obtained and used highly-sensitive keys for its Amazon-hosted cloud instance from an intermediate host -- effectively breaking into its service using its front-door key. The company added that while it encrypts sensitive data, the attacker may have "obtained the ability to decrypt" some information.
Click to expand...

OneLogin security chief reveals new details of data breach | ZDNet

Borg 386 · Jan 5, 2019

Password manager OneLogin hacked, exposing sensitive customer data

Password manager and single sign-on provider OneLogin has been hacked, the company has confirmed.

In a brief blog post, the company's chief security officer Alvaro Hoyos said that it had "detected unauthorized access to OneLogin data in our US data region," and that it had reached out to customers.

Hoyos said that the company had blocked the unauthorized access after the breach and is working with law enforcement.

The blog post had no further information or technical details about the incident -- though, the post omitted that hackers had stolen sensitive customer data, which was only cursorily mentioned in an email to customers, seen by ZDNet.

"OneLogin believes that all customers served by our US data center are affected and customer data was potentially compromised," the email read.
Click to expand...

Password manager OneLogin hacked, exposing sensitive customer data | ZDNet

Borg 386 · Jan 5, 2019

Massive leak exposes data on 123 million US households

The door to your personal data got left wide open once again.

Researchers revealed Tuesday that earlier this year they discovered a massive database -- containing information on more than 123 million American households -- that was sitting unsecured on the internet.

The cloud-based data repository from marketing analytics company Alteryx exposed a wide range of personal details about virtually every American household, according to researchers at cybersecurity company UpGuard. The leak put consumers at risk for a range of nefarious activities, from spamming to identity theft, the researchers warned.

Though no names were exposed, the data set included 248 different data fields covering a wide variety of specific personal information, including address, age, gender, education, occupation and marital status. Other fields included mortgage and financial information, phone numbers and the number of children in the household.

"From home addresses and contact information, to mortgage ownership and financial histories, to very specific analysis of purchasing behavior, the exposed data constitutes a remarkably invasive glimpse into the lives of American consumers," UpGuard researchers Chris Vickery and Dan O'Sullivan wrote in their analysis.
Click to expand...

Massive leak exposes data on 123 million US households - CNET

Experian added a pass-the-buck aspect to its response: "This is an Alteryx issue, and does not involve any Experian systems. Alteryx has already confirmed with you that the data in question contained no names of any individuals or any other personal identifying information, and does not pose any risk of identity theft to any consumers. We have been assured by Alteryx that they promptly remedied this issue."
Click to expand...

Every Single American Household Exposed in Massive Leak - Infosecurity Magazine

Windows 10: Data of 2.4 million Blur password manager users left exposed online

Data of 2.4 million Blur password manager users left exposed online

Data of 2.4 million Blur password manager users left exposed online

Data of 2.4 million Blur password manager users left exposed online

Data of 2.4 million Blur password manager users left exposed online - Similar Threads - Data million Blur

2 million fonts

2 million fonts

2 million fonts

ntdll.dll crashing Left 4 Dead 2

Left 4 dead 2 lagging

Facebook database holding 419 million user entries was posted online

Massive leak exposes data on 123 million US households

Millions of Verizon customer records exposed in security lapse

Password manager OneLogin hacked, exposing sensitive customer data