HipChat Hackers May Have Nabbed User Info, Chat Content

Do yous use HipChat at work? Sorry to written report, but the communication platform has been breached.

SecurityWatch HipChat maker Atlassian on Monday said its Security Intelligence Team discovered the intrusion over the weekend. Hackers leveraged a vulnerability in a "popular third-party library used by HipChat.com" to access content from the service, Atlassian Chief Security Officer Ganesh Krishnan wrote in blog post.

The hackers may take accessed and made away with user account information including names, email addresses, and hashed passwords, along with metadata like the room name and topic.

In a smaller number of cases, the hackers may have also stolen the messages and other content in rooms — a potential worst-instance scenario for businesses. Krishnan said HipChat is contacting and plans to "work closely" with customers who had their internal communications breached.

"For the vast majority of instances (more than than 99.95 percent), we have establish no show that letters or content in rooms have been accessed," Krishnan wrote. "Additionally, nosotros have plant no evidence of unauthorized access to financial and/or credit card information."

HipChat issued a password reset for affected users. If yous utilise HipChat.com, watch out for an e-mail from the visitor'due south security team with instructions on resetting your password. HipChat is only sending these messages to impacted customers; if you don't get an email it's because the visitor found "no evidence" that y'all're afflicted past the alienation, Krishnan wrote.

Atlassian is too currently working with law enforcement to investigate the incident. The company is readying an update for the HipChat server that volition coil out via the standard update channel.

"We are confident we have isolated the affected systems and airtight whatsoever unauthorized access," Krishnan wrote. "We have found no show of other Atlassian systems or products being affected."

About Angela Moscaritolo

Angela Moscaritolo

Angela Moscaritolo is PCMag's expert on fitness and smart home products. Instruction yoga for near x years has helped her in evaluating a range of connected health products including fitness trackers, centre rate monitors, rowers, smart scales, stationary bikes, forcefulness grooming machines, treadmills, and more. Angela as well tests smart habitation devices from her ranch in Florida, including air purifiers, kitchen appliances, and robot vacuums, but to proper noun a few.