A security incident occurred at the manufacturer of network technology Ubiquiti. Unknown third parties had access to information systems held by an unnamed cloud provider.

In a The message currently being sent to customers is reported by Ubiquiti that there is currently no evidence that the intruders had access to databases containing customer information. In the same breath they also mention that access cannot be excluded.

Access to passwords? Is that the If so, the attackers could have access to addresses, e-mail addresses, names, passwords and phone numbers. Ubiquiti guarantees that passwords are protected (hash + salt), so that the attackers cannot do much with the information in this state. It is currently not known which hash algorithm is used.

The network technology manufacturer assures that they have not observed any unauthorized access to user accounts so far. Nevertheless, as a precaution, all affected customers should change their passwords quickly. This should also be done with the same password for other online services.

Keep your account secure Ubiquiti also recommends to activate two-factor authentication (2FA). This protective mechanism puts another obstacle in the way of attackers. Even if they have a password, they lack the second factor in the form of a numerical code to access an account. Legal owners of an account generate this with an authenticator app or they can have it sent to them via SMS. Access is only possible after entering the password and the code.

(des)