Stories
Slash Boxes
Comments

SoylentNews is people

posted by requerdanos on Saturday January 23 2021, @06:01PM   Printer-friendly

Hacker leaks full database of 77 million Nitro PDF user records:

A stolen database containing the email addresses, names, and passwords of more than 77 million records of Nitro PDF service users was leaked [on January 20, 2021].

[...] The 14GB leaked database contains 77,159,696 records with users' email addresses, full names, bcrypt hashed passwords, titles, company names, IP addresses, and other system-related information.

The database has also been added to the Have I Been Pwned service which allows users to check if their info has also been compromised in this data breach and leaked on the Internet.

Nitro is an application that helps create, edit, and sign PDFs and digital documents, an app that Nitro Software claims to have over 10,000 business customers and roughly 1.8 million licensed users.

Nitro also provides a cloud service that customers can use to share documents with coworkers or any other organizations involved in the document creation process.

The massive Nitro PDF data breach BleepingComputer first reported last year also impacts many well-known organizations, including Google, Apple, Microsoft, Chase, and Citibank.

[...] As malicious actors can use the leaked user details to launch more credible phishing attacks or for credential stuffing, affected Nitro PDF users are strongly advised to change their passwords to a strong, unique password.

Wikipedia info on Nitro PDF.


Original Submission

This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
(1)
  • (Score: 2) by Runaway1956 on Saturday January 23 2021, @06:04PM

    by Runaway1956 (2926) Subscriber Badge on Saturday January 23 2021, @06:04PM (#1104225) Journal

    This is the reason we should all be in The Cloud!

  • (Score: 2) by SomeGuy on Saturday January 23 2021, @07:10PM (5 children)

    by SomeGuy (5632) on Saturday January 23 2021, @07:10PM (#1104252)

    Nitro is an application that helps create, edit, and sign PDFs and digital documents,

    This needs to be on a remote server.... because why?

    Right, because buzzword compliance, because data mining, because consumertards love getting "hacked".

    There is on on-line PDF tool that I have to use ocasionally, and I would pay good $$$ money to have a local copy that doesn't rely on anything remote so I don't have to worry each time that it has gone away, or changed to become incompatible with my needs.

    • (Score: 2) by maxwell demon on Saturday January 23 2021, @08:40PM

      by maxwell demon (1608) on Saturday January 23 2021, @08:40PM (#1104292) Journal

      This needs to be on a remote server.... because why?

      From how I understand the summary, that is not what is on the cloud, but (emphasis by me):

      Nitro also provides a cloud service that customers can use to share documents with coworkers or any other organizations involved in the document creation process.

      Of course the type of information mentioned in the summary could also be on some registration server.

      --
      The Tao of math: The numbers you can count are not the real numbers.
    • (Score: 0) by Anonymous Coward on Saturday January 23 2021, @11:46PM

      by Anonymous Coward on Saturday January 23 2021, @11:46PM (#1104351)

      > There is on on-line PDF tool that I have to use ocasionally, and I would pay good $$$ money to have a local copy

      Adobe (Acrobat) Reader does "Fill & Sign" for free, the first time you have to set up a signature block and password. Pretty sure it's all local, I set up my older "Reader XI" to do this years ago (don't use it very often).

      That's about the only time I use Reader, SumatraPDF is a lot faster/nicer for viewing PDFs (also eBooks & .ps files that haven't been pdf'd yet).

    • (Score: 2) by looorg on Sunday January 24 2021, @01:39AM

      by looorg (578) on Sunday January 24 2021, @01:39AM (#1104378)

      You can have Nitro PDF as a standalone client, no need to login or cloud or whatever. It's all "features" so you can share your docs etc without using email or whatever. That said I do agree with the sentiment of who actually wants this and why is it actually needed. It's not so to speak and essential feature for a PDF viewer/editor.

    • (Score: 2) by driverless on Sunday January 24 2021, @11:16AM

      by driverless (4770) on Sunday January 24 2021, @11:16AM (#1104455)

      Nitro PDF users are strongly advised to change their passwords to a strong, unique password.

      Already done that, my Nitro PDF password is 8dfh0y78ryer0hunter2, no-one will ever guess that.

    • (Score: 2) by driverless on Sunday January 24 2021, @11:21AM

      by driverless (4770) on Sunday January 24 2021, @11:21AM (#1104456)

      Nitro requires that you provide a name + email to download their free version [gonitro.com], so anyone who's ever downloaded it will have information in this list. I'll bet 99% of the entries are junk ("Mickey Mouse/mickey@disney.com") or nothing that isn't already publicly available on the net.

  • (Score: 0) by Anonymous Coward on Saturday January 23 2021, @07:55PM

    by Anonymous Coward on Saturday January 23 2021, @07:55PM (#1104272)

    get treated like one!

(1)