Latest Tech News - MongoHQ scrambles to address major database hack

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts
  • vis~as
    • Sep 2006
    • 8928

    Latest Tech News - MongoHQ scrambles to address major database hack

    divdiv class=postBody txtWrap section=txt readability=14pDatabase hosting service MongoHQ suffered a considerable security breach on Monday, in which users' e-mail addresses, hashed password data, and other account information was exposed to hackers./pp We detected unauthorized access to an internal support application using a password that was shared with a compromised personal account, MongoHQ co-founder Jason McCay wrote in a a href=http://security.mongohq.com/noticeblog post/a. In handling security incidents, MongoHQ's priorities are to halt the attack, eliminate the control failures that allowed the attack to occur, and to report the incident candidly and accurately to our customers./pp/p In an effort to secure its networks, MongoHQ has provided users with information on the incident and how it's working to both neutralize the breach and prevent future attacks. First, it locked out every MongoHQ employee account while it is enabling a credential reset and audit. Second, it disabled its employee-facing support applications while it sets up an enforced two-factor authentication, a system of graduated permissions, and other security measures.p As a precaution, we took additional steps on behalf of our customers to invalidate the Amazon Web Services credentials we were storing for you, McCay wrote. We have done the work to ensure the security of your data. We have taken further steps to test and validate this work by bringing on a third-party security firm for testing of this effort./pp It's unclear how many users were affected in the breach. McCay said that MongoHQ will continue to update its a href=http://security.mongohq.com/noticeWeb site/a with any new information on the hack, along with recommendations for users to protect their data./pp/p/div/divbrbrcentera href=http://www.wizardrss.comPowered By WizardRSS.com/a | a href=http://www.wizardrss.comFull Text RSS Feed/a | a href=http://www.amazon.com/RFID-Blocking-Cards-Identity-Protector/dp/B00CJHZLEWRFID/a | a href=http://www.wpzonbuilder.comAmazon Affiliate/a/center
Working...
X