Your social media memories may have been compromised

Around 4.7 million people- or one in five affected users- has also had their phone number attached to their account breached

However, no financial data or private messages were affected.

"On July 4, 2018, the attacker (s) conducted activities including an attack against the production database, and transfer of data".

The breach also led to the loss of access tokens Timehop uses to access other social networks such as Twitter, Facebook and Instagram and the posts you've made there. Users must login and re-authenticate each social media account they have connected to Timehop, in order to receive a new and secure key. TimeHop recommends adding a PIN to your phone account because if abused, this could be used for identity theft - starting with, but not limited to, porting the number without permission.

"We have deactivated these keys so they can no longer be used by anyone", the company said.

Around 4.7 million people - or one in five affected users - may have also had their phone number compromised.

In terms of how its network was accessed, it appears that the attacker was able to compromise Timehop's cloud computing environment by targeting an account that had not been protected by multifactor authentication. We did this in an abundance of caution, to reset all the keys.

There was a "short time window during which it was theoretically possible for unauthorised users to access those posts" but there is "no evidence that this actually happened", according to the blog post. Installing anti-malware can also be beneficial.

Subscribe to alerts. A number of institutions that provide financial services, credit card issuers included, offer customers the chance to be notified when they detect suspicious activity. Timehop system administrators have added the necessary protections for the accounts that didn't have them and are confident such an attack can't be repeated.

TimeHop has now invalidated all API tokens and produced one of the most comprehensive security bulletins we've ever seen with a wealth of information including what the implications are under GDPR - or more specifically, that it's not entirely clear.

According to its preliminary investigation of the incident, the attacker first accessed Timehop's cloud environment in December - using compromised admin credentials, and apparently conducting reconnaissance for a few days that month, and again for another day in March and one in June, before going on to launch the attack on July 4, during a United States holiday. "We have no evidence that any accounts were accessed without authorization".

With the "access tokens", hackers could view some of the users' social media posts without their permission.

"It is recommended that you take additional security precautions with your cellular provider to ensure that your number can not be ported", the company adds.

The New York-based startup discovered the attack at 2:04am US Eastern Time (7:04am BST) on July 4.

Related News:



Most liked

Microsoft Fans Are Taking Things On Their Own Hands — Surface Phone
The petition serves as an indicator that fans are interested in the product and that Microsoft should not cancel the release. Users around the globe have started a petition urging Microsoft to make the device a reality.

Joe Hart missed England's World Cup quarter-final win to play cricket
Joe Hart , as a youngster, played cricket for his local club before shifting his focus to football. He has remained a member of the cricket club and has several friends who have played there, ...

Harvey Weinstein Pleads Not Guilty To Sex Charge
Harvey Weinstein pled not guilty to sexually assaulting a woman in 2006 during an arraignment in downtown Manhattan on Monday. Weinstein as a predator when the interactions were each consensual is simply not justified".

'Federer is Picasso but I am an artist,' claims Mannarino
I created more chances in the second set and was always able to stay pretty clean on my own service game. The 36-year-old Swiss served out the match with an ace out wide, winning in one hour and 45 minutes.

UK foreign minister Boris Johnson resigns over Brexit discord
European Council President Donald Tusk said it was unfortunate the whole "idea of Brexit has not left together with David Davis". The staunchly pro-Brexit Conservative lawmaker Andrea Jenkyns tweeted: "Fantastic news.

West Nile virus positive mosquitoes detected in Boston
During the summer months, MDPH collects routine samples of mosquitoes to monitor for West Nile and Eastern Equine Encephalitis . Since 2002, there have been 64 confirmed human cases of West Nile virus in Lake County, as well as two confirmed deaths.

Oprah‚ Beyoncé‚ Jay-Z headed to SA for Global Citizen Festival
The festival will be celebrated over 6 months in line with the United Nations sustainable development goals. The Global Citizen is a movement that focuses on poverty and aims to end world poverty by 2030.

The first teaser trailer for Sasha Baron Cohen's new series 'Who is America?' looks very promising
But apart from a few cryptic videos teasing the July 15 premiere of "perhaps the most risky show in the history of television", we knew little about the new series.

Sacha Baron Cohen Gets Dick Cheney to Sign a ‘Waterboarding Kit’
That's right, Cohen got a former American vice-president to sign his waterboard kit. "Sure", Cheney replies, signing the kit. All signs are pointing to the much-talked-about series Cohen has in the works.

Travis Pastrana Lands 3 Of Evel Knievel's Legendary Jumps
The first stunt takes aim at at Knievel's 1973 jump over 50 stacked, crushed cars, lined up 18 abreast, for 120 feet at the L.A. The second jump had Pastrana recreating a stunt Knievel performed at King's Island in OH , when he jumped 14 Greyhound buses.

‘Captain Marvel’ wraps ahead of March 2019 release
So that'll be the first one where it's a character for the whole movie, as opposed to a glimpse at a certain period of time". With a story set back in the 90s, we'll learn how Carol Danvers became one of the most powerful beings in the universe.

Chicago march leader says 'the people won today'
Police warned earlier this week that any pedestrian who entered the expressway would face arrest and prosecution. They want to draw attention to the city's gun violence and pressure public officials to do more to stop it.

Paris Saint-Germain 'eye £240m Philippe Coutinho swoop'
Paris Saint-Germain want to sign Philippe Coutinho from Barcelona , according to Catalan newspaper Mundo Deportivo . At the 2018 World Cup, Coutinho reached the quarterfinals, where the Brazilians lost to the Belgian squad 1-2.

Pompeo brushes off North Korean 'gangster' claim
Leaked U.S. intelligence findings have concluded that North Korea does not intend to give up its nuclear program completely. On his two previous trips to Pyongyang, the secretary of state met with Kim to lay the groundwork for the summit.

Indian court upholds death sentences over 2012 gang-rape
The Delhi rape case pertains to the gang rape of a paramedical student on 16 December 2012 , which triggered nationwide protests. The accused appealed to the supreme court , which eventually delivered its judgment confirming the death penalty in May 2017 .