Networking giant Ubiquiti alerts customers of potential data breach
Networking device maker Ubiquiti has announced a security incident that may have exposed its customers' data.
Ubiquiti is a very popular networking device manufacturer best known for its UniFi line of wired and wireless network products and a cloud management platform.
Today, Ubiquiti began emailing customers to change their passwords and enable 2FA after an attacker hacked their systems hosted at a third-party cloud provider.
"We recently became aware of unauthorized access to certain of our information technology systems hosted by a third party cloud provider. We have no indication that there has been unauthorized activity with respect to any user’s account," Ubiquiti emailed customers.
Ubiquiti states that they are not aware of any customer databases that were illegally accessed but cannot be sure that the attack did not expose customers' data.
"We are not currently aware of evidence of access to any databases that host user data, but we cannot be certain that user data has not been exposed. This data may include your name, email address, and the one-way encrypted password to your account (in technical terms, the passwords are hashed and salted). The data may also include your address and phone number if you have provided that to us," the email continued.
You can read the full email sent to customers below:
Email sent to Ubiquiti customers
Email sent to Ubiquiti customers
Source: Twitter
Ubiquiti owners are frustrated as UniFi requires them to create cloud accounts to manage local devices, and many would prefer to be able to manage everything locally.
Over the weekend, Ubiquiti suffered a widespread outage to their UniFi cloud management platform that prevented users from using the web and mobile apps or manage their devices.
Ubiquiti outage notification
Ubiquiti outage notification
It is not known if this outage is related to the security incident disclosed today.
BleepingComputer has contacted Ubiquiti with questions about this incident and its relation to the outage but has not heard back.
Ubiquiti is a very popular networking device manufacturer best known for its UniFi line of wired and wireless network products and a cloud management platform.
Today, Ubiquiti began emailing customers to change their passwords and enable 2FA after an attacker hacked their systems hosted at a third-party cloud provider.
"We recently became aware of unauthorized access to certain of our information technology systems hosted by a third party cloud provider. We have no indication that there has been unauthorized activity with respect to any user’s account," Ubiquiti emailed customers.
Ubiquiti states that they are not aware of any customer databases that were illegally accessed but cannot be sure that the attack did not expose customers' data.
"We are not currently aware of evidence of access to any databases that host user data, but we cannot be certain that user data has not been exposed. This data may include your name, email address, and the one-way encrypted password to your account (in technical terms, the passwords are hashed and salted). The data may also include your address and phone number if you have provided that to us," the email continued.
You can read the full email sent to customers below:
Email sent to Ubiquiti customers
Email sent to Ubiquiti customers
Source: Twitter
Ubiquiti owners are frustrated as UniFi requires them to create cloud accounts to manage local devices, and many would prefer to be able to manage everything locally.
Over the weekend, Ubiquiti suffered a widespread outage to their UniFi cloud management platform that prevented users from using the web and mobile apps or manage their devices.
Ubiquiti outage notification
Ubiquiti outage notification
It is not known if this outage is related to the security incident disclosed today.
BleepingComputer has contacted Ubiquiti with questions about this incident and its relation to the outage but has not heard back.
