Menu
Twitter hacked; 250,000 users must reset their passwords

Twitter hacked; 250,000 users must reset their passwords

The company said it has been targeted by hackers this week who may have made off with user names and passwords

Twitter's servers have been breached by "extremely sophisticated" hackers who may have made off with user names and passwords for about 250,000 users, according to the company.

Twitter said unusual access patterns led it to identify the attacks, which took place during the past week.

"We discovered one live attack and were able to shut it down in process moments later. However, our investigation has thus far indicated that the attackers may have had access to limited user information -- usernames, email addresses, session tokens and encrypted/salted versions of passwords -- for approximately 250,000 users," Twitter Director of Information Security Bob Lord said in a blog post.

Twitter reset the passwords and revoked session tokens for the accounts, and said it was emailing the affected users on Friday and telling them to reset their passwords.

"This attack was not the work of amateurs, and we do not believe it was an isolated incident," the company said in its post.

It noted that The New York Times and The Wall Street Journal also said they'd been targeted by hackers this week. Those companies said the attacks originated in China, but Twitter did not point to a country of origin.

Twitter said it thinks other companies and organizations have recently been similarly attacked.

It urged all its users to ensure they are using strong passwords on Twitter and elsewhere on the Internet. Passwords should be at least 10 characters and use a mix of upper- and lowercase letters, as well as numbers and symbols, the site said.

"Using the same password for multiple online accounts significantly increases your odds of being compromised," Twitter said. "If you are not using good password hygiene, take a moment now to change your Twitter passwords."

The company said it was still gathering information about the attacks and is working with federal law enforcement agencies to prosecute the attackers.

James Niccolai covers data centers and general technology news for IDG News Service. Follow James on Twitter at @jniccolai. James's e-mail address is james_niccolai@idg.com

Follow Us

Join the ARN newsletter!

Error: Please check your email address.

Tags Internet-based applications and servicessecurityAccess control and authenticationsocial networkingtwittersocial mediainternet

Upcoming

Slideshows

IN PICTURES: Windows 10 Sydney launch

IN PICTURES: Windows 10 Sydney launch

Tech lovers and party-goers alike headed down to Mrs Macquarie's Chair to be part of the world-first Windows 10 Launch Party. The night featured a presentation by Microsoft Australia managing director, Pip Marlow, DJs, live demonstrations and digital artistry by Lister.

IN PICTURES: Windows 10 Sydney launch
In Pictures: User guide to Windows 10

In Pictures: User guide to Windows 10

If you’re going for an immediate upgrade to Windows 10 from your Windows 7 or Windows 8/8.1 computer, this guide will get you up to speed as quickly as possible.

In Pictures: User guide to Windows 10

iasset.com is a channel management ecosystem that automates all major aspects of the entire sales, marketing and service process, including data tracking, integrated learning, knowledge management and product lifecycle management.

Show Comments