A Famous website for the discussion of the Ubuntu distribution (http://ubuntuforums.org/) was breached on Saturday and hackers have gained encrypted passwords and email addresses.
In the meantime we checked out the website and it is still down for Maintenance and stated some points what has been hacked:
- Unfortunately the attackers have gotten every user’s local username, password, and email address from the Ubuntu Forums database.
- The passwords are not stored in plain text, they are stored as salted hashes. However, if you were using the same password as your Ubuntu Forums one on another service (such as email), you are strongly encouraged to change the password on the other service ASAP.
- Ubuntu One, Launchpad and other Ubuntu/Canonical services are NOT affected by the breach.
Time when the hack happens:
- 2013-07-20 2011UTC: Reports of defacement
- 2013-07-20 2015UTC: Site taken down, this splash page put in place while investigation continues.
Ubuntu says:
- “We have begun the process of notifying by email all users whose details have been compromised,”
- “We are continuing to investigate exactly how the attackers were able to gain access and are working with the software providers to address that issue.”
