Ubiquiti alerts customers about potential data breach
By MYBRANDBOOK
Ubiquiti has asked its customers to change their password because of unauthorized access to some of their information technology systems hosted by a third-party cloud provider. They did not specify the cloud provider that hosts its databases, nor how the attackers managed to gain access to them.
The company explained in an online alert and notification sent directly to users that “We cannot be certain that user data has not been exposed. This data may include your name, email address, and the one-way encrypted password to your account (in technical terms, the passwords are hashed and salted). The data may also include your address and phone number if you have provided that to us”. The email alerts sent by the company contain direct links to the web portal (located at account.ui.com), but some users were understandably worried that the email may be a phishing attempt.
Ubiquiti made sure to point out that they “have no indication that there has been unauthorized activity with respect to any user’s account,” but nevertheless encouraged every user to change the password and enable two-factor authentication on their Ubiquiti accounts, and to change their password on any website where they use the same user ID or password.
It is still unknown whether the possible Ubiquiti data breach is related with the outage to the UniFi cloud management platform experienced on Sunday.
Despite many customers being unhappy with the fact that they are required to create an account through the company’s cloud service to activate Ubiquiti devices, their popularity is unquestionable: Ubiquiti claims that nearly 85 million of its devices “play a key role in creating networking infrastructure in over 200 countries and territories around the world.”
To change their passwords, customers should visit the web portal indipendently, log in, go to Settings and select the Security tab. There, they can change their password, set a session timeout value, and enable 2FA. Customers who have forgotten their password or aren’t sure whether they’ve set up an account in the first place can use the “Forgot password?” option, enter their email address and wait for the password reset email.
Legal Battle Over IT Act Intensifies Amid Musk’s India Plans
The outcome of the legal dispute between X Corp and the Indian government c...
Wipro inks 10-year deal with Phoenix Group's ReAssure UK worth
The agreement, executed through Wipro and its 100% subsidiary,...
Centre announces that DPDP Rules nearing Finalisation by April
The government seeks to refine the rules for robust data protection, ensuri...
Home Ministry cracks down on PoS agents in digital arrest scam
Digital arrest scams are a growing cybercrime where victims are coerced or ...
Icons Of India : Dr. Sanjay Bahl
Dr. Sanjay Bahl has around four decades of experience in the ICT indus...
ICONS OF INDIA : SANTHOSH VISWANATHAN
Santhosh Viswanathan is the the Vice President and Managing Director f...
EESL - Energy Efficiency Services Limited
EESL is uniquely positioned in India’s energy sector to address ener...
STPI - Software Technology Parks of India
STPI promotes and facilitates the growth of the IT and ITES industry i...
TCIL - Telecommunications Consultants India Limited
TCIL is a government-owned engineering and consultancy company...
Indian Tech Talent Excelling The Tech World - George Kurian, CEO, Netapp
George Kurian, the CEO of global data storage and management services ...
Indian Tech Talent Excelling The Tech World - AJAY BANGA, President - World Bank
Ajay Banga is an Indian-born American business executive who currently...