{"id":39091,"date":"2021-01-11T21:30:22","date_gmt":"2021-01-11T21:30:22","guid":{"rendered":"http:\/\/e5fc9033-7c25-4d2d-99df-967869ed7434"},"modified":"2021-01-11T21:30:22","modified_gmt":"2021-01-11T21:30:22","slug":"ubiquiti-tells-customers-to-change-passwords-after-security-breach","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/ubiquiti-tells-customers-to-change-passwords-after-security-breach\/","title":{"rendered":"Ubiquiti tells customers to change passwords after security breach"},"content":{"rendered":"
\"Ubiquiti<\/span>
<\/span> Image: Ubiquiti Networks <\/span><\/figcaption><\/figure>\n

Networking equipment and IoT device vendor Ubiquiti Networks has sent out today notification emails to its customers informing them of a recent security breach.<\/p>\n

“We recently became aware of unauthorized access to certain of our information technology systems hosted by a third party cloud provider,” Ubiquiti said in emails today.<\/p>\n

The servers stored information pertaining to user profiles for account.ui.com, a web portal that Ubiquiti makes available to customers who bought one of its products.<\/p>\n

The site is used to manage devices from a remote location and as a help and support portal.<\/p>\n

According to Ubiquiti, the intruder accessed servers that stored data on UI.com users, such as names, email addresses, and salted and hashed passwords.<\/p>\n

Home addresses and phone numbers may have also been exposed, but only if users decided to configure this information into the portal.<\/p>\n

How many Ubiquiti users are impacted and how the data breach occurred remains a mystery.<\/p>\n

<\/section>\n

It is currently unclear if the “unauthorized access” took place when a security researcher found the exposed data or was due to a malicious threat actor.<\/p>\n

A Ubiquiti spokesperson did not immediately return a request for comment send before this article’s publication.<\/p>\n

Despite the bad news to its customers, Ubiquiti said that it had not seen any unauthorized access to customer accounts as a result of this incident.<\/p>\n

The company is now asking all users who receive the email to change their account passwords and turn on two-factor authentication.<\/p>\n

While initially, some users looked at the emails as a phishing attempt, a Ubiquiti tech support staffer confirmed<\/a> that they were authentic on the company’s forums.<\/p>\n

A full copy of the email is available below, as shared today<\/a> on social media.<\/p>\n

\"ubiquiti-breach-notice.png\"<\/span>