ubiquiti data breach Ubiquiti Suffers Data Breach

[G_K]

Ubiquiti have been breached 

 

Summary

Ubiquiti tells customers to change passwords after security breach

 

Quotes

Quote

Networking equipment and IoT device vendor Ubiquiti Networks has sent out today notification emails to its customers informing them of a recent security breach.

 

 

Sources

https://www.zdnet.com/article/ubiquiti-tells-customers-to-change-passwords-after-security-breach/

 

https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_ce2d3f2e-3bc4-4ba2-84ed-6c3467cdd9eb

 

https://www.darkreading.com/attacks-breaches/iot-vendor-ubiquiti-suffers-data-breach/d/d-id/1339872

 

 

[That Franc]

The fact that they came forward and notified their users of a potential breach is quite refreshing, and the recommendations are very sound.

[Helpful Tech Witch]

Wow. A company that tells it's costumers about the breach instead of just hiding it untill someone leaks it.

[RaddedMC]

This breach just affects their cloud services, right?
lol good thing I didn't use a unms cloud server

[brwainer]

1 hour ago, RaddedMC said:

This breach just affects their cloud services, right?
lol good thing I didn't use a unms cloud server

Ubiquiti uses a single account for everything (including store and forums). So if you have a Ubiquiti account, you should change the password. 

[StDragon]

Probably a good idea to change all of your account passwords at least once a year for those you rarely log into. These days, you just never can be too careful.

[BlueChinchillaEatingDorito]

2 hours ago, HelpfulTechWizard said:

Wow. A company that tells it's costumers about the breach instead of just hiding it untill someone leaks it.

Honestly they're more common than you would think. One that hits literally at mine and LTT's front door recently:

 

https://globalnews.ca/news/7548761/translink-cyberattack-personal-info/

https://hotforsecurity.bitdefender.com/blog/one-month-after-ransomware-attack-metro-vancouvers-transit-system-still-not-up-to-speed-25014.html

[Souldust]

8 hours ago, That Franc said:

The fact that they came forward and notified their users of a potential breach is quite refreshing, and the recommendations are very sound.

Ubiquity seem to be a golden standard when it comes to company's and if they have a data breach, the fact that they have come forward and said that customers need to change their passwords is really good on their part in dealing with the situation post-breach

[Bananasplit_00]

Thought I had a ubiquity acc as I have used their APs and routers at my parents place but I have not gotten an email so guess not then? Huh

[LogicalDrm]

@Uknown0002, this thread is barely following Tech news format. Please expand summary or add your own thoughts (or better both) if you want it to be kept in Tech News section. Your personal opinion must be longer than couple of line with content like "I don't like this". For example, you can tell why did you decide to share this information to our community.

 

E: Moved out from Tech News.

Edited January 13, 2021 by LogicalDrm

[wamred]

Yeah, this doesn’t seem to be good but at least they told their users

[StDragon]

8 hours ago, Souldust said:

Ubiquity seem to be a golden standard when it comes to company's and if they have a data breach, the fact that they have come forward and said that customers need to change their passwords is really good on their part in dealing with the situation post-breach

 

2 hours ago, wamred said:

Yeah, this doesn’t seem to be good but at least they told their users

 

Hopefully this doesn't follow the same trajectory to that of Tyler Technologies. They too sent out notifications of a possible intrusion that was ostensibly limited in scope. Shortly after their first e-mail was sent, they followed up by recommending everyone change their passwords ASAP.

 

So at first glance this would be a "heads up" level of awareness. But as an IT professional, that's when justified paranoia kicks in and I change passwords regardless if they recommend it or not.

 

Always err on the side of caution. I suspect the fallout could potentially be wider reaching in scope as they expand their discovery phase.

[wamred]

1 hour ago, StDragon said:

 

 

Hopefully this doesn't follow the same trajectory to that of Tyler Technologies. They too sent out notifications of a possible intrusion that was ostensibly limited in scope. Shortly after their first e-mail was sent, they followed up by recommending everyone change their passwords ASAP.

 

So at first glance this would be a "heads up" level of awareness. But as an IT professional, that's when justified paranoia kicks in and I change passwords regardless if they recommend it or not.

 

Always err on the side of caution. I suspect the fallout could potentially be wider reaching in scope as they expand their discovery phase.

Good point