Reddit announced today that the website experienced a data breach between June 14 and June 18. The affected information includes all Reddit data from before 2007, including account credentials, as well as email digests from June 2018. The hacker accessed the data through an old database backup.
As The Verge reports, “Reddit had required two-factor authentication on its accounts but the hacker intercepted the SMS verification and was able to gain access. The bad actor was able to see backup data, source code, and other employee logs in Reddit systems, but did not have access to changing any of it.”
Reddit is messaging users that were affected, and advising anyone who currently uses a password that they used on Reddit in 2007 on any other sites to change those passwords. The incident has been reported to the authorities and is under investigation.
Get the full story at Reddit.