Stories
Slash Boxes
Comments

SoylentNews is people

posted by janrinok on Saturday October 22 2016, @02:57AM   Printer-friendly
from the "when-will-they-ever-learn..." dept.

Submitted via IRC for TheMightyBuzzard

Weebly, a popular web-hosting service featuring a drag-and-drop website builder, has been breached, and email addresses/usernames, IP addresses and encrypted passwords for some 43 million users have been stolen.

Unfortunately, the company did not notice the breach when it happened, around February 2016. They were notified of it once LeakedSource got its hands on the stolen data.

"Unlike nearly every other hack, the co-founder and CTO of Weebly Chris Fanini fortunately did not have his head burried [sic] deeply in the sand and actually responded to our communication requests. We have been working with them to ensure the security of their users meaning password resets as well as notification emails are now being sent out," the group noted.

Weebly also published a security update on the site, explaining what they did once they were made aware of the breach:

  • Confirmed the authenticity of the data
  • Called in security consultants to help with the investigation
  • Reset passwords of affected users and notified them via email
  • Took steps to enhance their network security to prevent future breaches
  • Implemented tougher password requirements
  • Set up a dashboard for users to monitor their log-in history.

Source: https://www.helpnetsecurity.com/2016/10/21/weebly-breach-confirmed/


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 0) by Anonymous Coward on Sunday October 23 2016, @01:02AM

    by Anonymous Coward on Sunday October 23 2016, @01:02AM (#417704)

    Of those 43 people affected, how many have actually heard of Weebly?