Ubuntu user forum hacked

By

Millions of users see data compromised.

The user forum of popular Linux-based operating system Ubuntu has suffered a major security breach over the weekend, with usernames, passwords and emaiil addresses of users being captured by attackers.

Ubuntu user forum hacked

Ubuntu user forum operators posted a "down for maintenance notice" acknowledging the breach, and saying they were working hard to restore normal operations:

What we know

  • Unfortunately the attackers have gotten every user's local username, password, and email address from the Ubuntu Forums database.
  • The passwords are not stored in plain text. However, if you were using the same password as your Ubuntu Forums one on another service (such as email), you are strongly encouraged to change the password on the other service ASAP.
  • Ubuntu One, Launchpad and other Ubuntu/Canonical services are NOT affected by the breach.

On the 2Buntu blog, developer Nathan Osman wrote that "a group of hackers were able to successfully gain root (superuser) access to the servers hosting hosting the Ubuntu Forums today and compromised the entire website". 

According to Osman, all usernames, password hashes, email addresses and personal information were compromised. 

Ubuntu claims to have more than twenty million users currently. According to Netcraft, Ubuntu Forums use the eponymous Linux-based operating system, Apache 2.0.55 with PHP 5.1.2 and the proprietary vBulletin forum software.

Got a news tip for our journalists? Share it with us anonymously here.
Copyright © iTnews.com.au . All rights reserved.
Tags:

Most Read Articles

Qantas facing 'significant' data theft after cyber attack

Qantas facing 'significant' data theft after cyber attack

Home Affairs officer accessed data on "friends and associates"

Home Affairs officer accessed data on "friends and associates"

International Criminal Court hit by cyber attack

International Criminal Court hit by cyber attack

Ex-student charged over Western Sydney University cyberattacks

Ex-student charged over Western Sydney University cyberattacks

Log In

  |  Forgot your password?