Reddit (2018)

[ramimac]

https://www.reddit.com/r/announcements/comments/93qnm5/we_had_a_security_incident_heres_what_you_need_to/
https://www.reddit.com/r/announcements/comments/93qnm5/we_had_a_security_incident_heres_what_you_need_to/e3f79r9/
https://oag.ca.gov/system/files/Reddit%20breach%20notice%20%28email%29_0.pdf

Known:

• we learned that between June 14 and June 18, an attacker compromised a few of our employees’ accounts with our cloud and source code hosting providers
• the main attack was via SMS intercept
• Compromised: All Reddit data from 2007 and before including account credentials and email addresses, Email digests sent by Reddit in June 2018, Reddit source code, internal logs, configuration files and other employee workspace files, but these two areas are the most significant categories of user data.
• Reddit is an AWS customer