Quora Hacked – 100 Million User’s Data Stolen By Hackers

Quora hacked more than 100 million Quora users accounts. Hackers gained unauthorized access to the servers and stolen account information, Public content and actions, and Non-public content and actions.

On last Friday Quora discovered that a malicious third party gained unauthorized access to their systems. Quora started an investigation with the help of third-party digital forensics and security firm and the investigation is still in the progress.

Quora Hacked – 100 Million User’s Affected

Quora determined that approximately 100 million users affected with the breach and following are the information compromised.

  • Account information, e.g. name, email address, encrypted (hashed) password, data imported from linked networks when authorized by users.
  • Public content and actions, e.g. questions, answers, comments, upvotes.
  • Non-public content and actions, e.g. answer requests, downvotes, direct messages (note that a low percentage of Quora users have sent or received such messages)

Quora confirms that the answers that are written anonymously are not affected by the breach as they did not store the identities.

Quora started notifying users about the breach and they are logging out all the users who may have affected with the breach.

If your account invalidated by Quora you will be prompted to reset your password by the next time while you trying to login Quora.

While the investigation is still ongoing, we have already taken steps to contain the incident, and our efforts to prevent this type of event from happening in the future are ongoing and a top priority, reads the blog post.

Quora security breach followed by other social media giants such as Facebook, Google+ and Tumblr.

You can follow us on Linkedin, Twitter, Facebook for daily Cybersecurity updates also you can take the Best Cybersecurity courses online to keep your self-updated.

Gurubaran

Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Recent Posts

Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…

1 day ago

Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years

Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…

1 day ago

Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication

Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…

1 day ago

OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root

A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…

1 day ago

GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories

GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…

1 day ago

SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data

Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…

1 day ago