Ubuntu forum was hacked 1.8 million username and password compromised

Ubuntu forum was hacked , and 1.8 million password was stolen according  to announcements by ubuntu forum . according to reports hackers breached security because the ubuntu forum was using outdated  vbuletin forum software . hackers defaced siteat the time of defacing main page was redirecting some page with image.

ubuntu forum breachaccording to announcement that ubuntu Ubuntu One, Launchpad and other Ubuntu/Canonical services are NOT affected by the breach.

What we know

  • Unfortunately the attackers have gotten every user’s local username, password, and email address from the Ubuntu Forums database.
  • The passwords are not stored in plain text. However, if you were using the same password as your Ubuntu Forums one on another service (such as email), you are strongly encouraged to change the password on the other service ASAP.
  • Ubuntu One, Launchpad and other Ubuntu/Canonical services are NOT affected by the breach.

accoding http://blog.sucuri.net/  vbuletin use MD5 hash and all the passwords was hashed with MD5 . if you used same password elsewhere along with ubuntu forum then change your password

UPDATE :

canonicals posted about breach in blog post 

There has been a security breach on the Ubuntu Forums site, ubuntuforums.org. We take information security and user privacy very seriously, and apologise for the breach and ensuing inconvenience.

source / via 

Tagged With : - -
Add Comment