Twitter hacked; 250,000 users must reset their passwords
- 02 February, 2013 01:08
- Comments
Twitter's servers have been breached by "extremely sophisticated" hackers who may have made off with user names and passwords for about 250,000 users, according to the company.
Twitter said unusual access patterns led it to identify the attacks, which took place during the past week.
"We discovered one live attack and were able to shut it down in process moments later. However, our investigation has thus far indicated that the attackers may have had access to limited user information -- usernames, email addresses, session tokens and encrypted/salted versions of passwords -- for approximately 250,000 users," Twitter Director of Information Security Bob Lord said in a blog post.
Twitter reset the passwords and revoked session tokens for the accounts, and said it was emailing the affected users on Friday and telling them to reset their passwords.
"This attack was not the work of amateurs, and we do not believe it was an isolated incident," the company said in its post.
It noted that The New York Times and The Wall Street Journal also said they'd been targeted by hackers this week. Those companies said the attacks originated in China, but Twitter did not point to a country of origin.
Twitter said it thinks other companies and organizations have recently been similarly attacked.
It urged all its users to ensure they are using strong passwords on Twitter and elsewhere on the Internet. Passwords should be at least 10 characters and use a mix of upper- and lowercase letters, as well as numbers and symbols, the site said.
"Using the same password for multiple online accounts significantly increases your odds of being compromised," Twitter said. "If you are not using good password hygiene, take a moment now to change your Twitter passwords."
The company said it was still gathering information about the attacks and is working with federal law enforcement agencies to prosecute the attackers.
James Niccolai covers data centers and general technology news for IDG News Service. Follow James on Twitter at @jniccolai. James's e-mail address is james_niccolai@idg.com
Recommended
Join the Computerworld Australia group on Linkedin. The group is open to IT Directors, IT Managers, Infrastructure Managers, Network Managers, Security Managers, Communications Managers.
- Bookmark this page
- Share this article
- Got more on this story? Email Computerworld
- Follow Computerworld on twitter
-
Telstra continues with billion dollar 4G plan
-
What’s life really like on the NBN? (Part II)
-
Australia lags Mongolia in Internet speeds
-
40 years ago, Ethernet's fathers were the startup kids
-
Windows 8 won't hit critical mass in enterprises, Forrester says
