Add “change all passwords” to your to-do list for today!
A massive memory leak from web services and security company Cloudflare may have exposed user data for thousands of sites.
There’s lots left to discover about the impact of the leakage—which is being called Cloudbleed, Gizmodo reports.
“What we do know that makes this so worrisome is that some of the memory leaks, which may have included user data, was able to be cached by search engines. Once indexed, nefarious types may have scraped and stored that data.”
According to Cloudflare “the greatest period of impact was from February 13 and February 18 with around 1 in every 3,300,000 HTTP requests through Cloudflare potentially resulting in memory leakage.”
A Github user has posted a list of sites they believe have been compromised. According to this user—who scraped a variety of sites—up to 4,287,625 may be at risk.
Here are some of the most notable sites believed to be at risk:
authy.com
patreon.com
medium.com
4chan.org
yelp.com
zendesk.com
uber.com
thepiratebay.org
pastebin.com
discordapp.com
change.org
feedly.com
hardsextube.com
nationalreview.com
petapixel.com
puu.sh
putlocker.ws
tineye.com
This is one of the most massive hacks that ever happened, so we highly recommend changing all your passwords.
Source: Gizmodo;