A few hours ago, some users of DockerHub received emails with the following content:
"On Thursday, April 25, 2019, we discovered unauthorized access to one of DockerHub's databases, which contains some non-financial user data. After the discovery, we immediately took all necessary steps to secure user data.
We would now like to share the information we were able to uncover during our investigation, including which DockerHub accounts were affected and what actions their owners should take now.
Here is what we managed to find out:
During the short period of unauthorized access to the DockerHub database, confidential information from approximately 190,000 accounts (less than 5% of users) may have been exposed. The data includes usernames and password hashes for a small percentage of those users, as well as GitHub and BitBucket tokens used for automated container builds.
What to do now:
— We ask users to change their DockerHub passwords and any other accounts that use the same password.
— For users who utilized automated builds, we have reset tokens and access keys that may have been affected. We also ask them to check their repositories for any recent suspicious activity.
— To learn how to review suspicious activity on your GitHub and BitBucket accounts over the past 24 hours, follow the links and
— This may affect your current builds from our automated build service. You may also need to disconnect and reconnect your GitHub and BitBucket accounts. This is detailed here
We, on our part, will be improving our security systems and reviewing our policies. We have also set up additional metrics to track any potential illegal activities in the future.
We are still investigating the incident and will keep you updated as new details emerge."
As usual, we check our own email, our accounts in the specified services, and come up with new passwords. We will update this post as new information becomes available.
Only registered users can participate in the survey. , please.
Did you receive a similar email?
Yes
No
I don't have an account on DockerHub.
26 users voted. 2 users abstained.
Source: habr.com
