Feeds

Tumblr, Pinterest, Twitter hipsters exposed in Zendesk data raid

Hacker slurps email info from helpdesk biz

Securing Web Applications Made Simple and Scalable

Customer service provider Zendesk has been hacked - potentially blowing the lid on the anonymity of some users of Twitter, Pinterest and Tumblr.

Zendesk, which handles helpdesk emails for the aforementioned trendy blog trio, copped to the breach of its network in a blog post last night. It admitted its system was illegally accessed this week and a hacker got into support information for those three clients.

The intruder downloaded email addresses for users who'd got in touch with Tumblr, Twitter and Pinterest via Zendesk for support, as well as the message subject lines. Although no sensitive information beyond this was swiped, the hacker can at least associate the email addresses with their owners' profiles and potentially unmask any anonymous tweeters, pinsters or tumblers behind them.

"We’re incredibly disappointed that this happened and are committed to doing everything we can to make certain it never happens again," the firm said. "We’ve already taken steps to improve our procedures and will continue to build even more robust security systems.

"We are also completely committed to working with authorities to bring anyone involved to justice and make certain we fully understand what happened. As this process unfolds, we aim to update our customers in as transparent and timely a manner as possible about new developments."

Twitter's support had this to say about the breach:

Meanwhile Tumblr emailed all of its affected users reminding them not to give out their password by email and warning them to watch out for unexpected emails.

"We're working with law enforcement and Zendesk to better understand this attack," the blogging site said. "Please monitor for email and Tumblr accounts for suspicious behaviour and notify us immediately if you have any concerns."

Zendesk is a customer service that sorts out support emails and queries from clients' users. Tumblr said it had been using the service for the last two and a half years. ®

The smart choice: opportunity from uncertainty

More from The Register

next story
BMW's ConnectedDrive falls over, bosses blame upgrade snafu
Traffic flows up 20% as motorway middle lanes miraculously unclog
Putin: Crack Tor for me and I'll make you a MILLIONAIRE
Russian Interior Ministry offers big pile o' roubles for busting pro-privacy browser
Mozilla fixes CRITICAL security holes in Firefox, urges v31 upgrade
Misc memory hazards 'could be exploited' - and guess what, one's a Javascript vuln
Manic malware Mayhem spreads through Linux, FreeBSD web servers
And how Google could cripple infection rate in a second
How long is too long to wait for a security fix?
Synology finally patches OpenSSL bugs in Trevor's NAS
Don't look, Snowden: Security biz chases Tails with zero-day flaws alert
Exodus vows not to sell secrets of whistleblower's favorite OS
Roll out the welcome mat to hackers and crackers
Security chap pens guide to bug bounty programs that won't fail like Yahoo!'s
prev story

Whitepapers

Top three mobile application threats
Prevent sensitive data leakage over insecure channels or stolen mobile devices.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.
Designing a Defense for Mobile Applications
Learn about the various considerations for defending mobile applications - from the application architecture itself to the myriad testing technologies.
Build a business case: developing custom apps
Learn how to maximize the value of custom applications by accelerating and simplifying their development.