Zendesk Breach Hits 10,000 Corporate Accounts

Customer support software giant Zendesk has discovered a security breach dating back to 2016, affecting thousands of corporate clients.

After being alerted to the incident by a third party, the firm last week identified 10,000 Zendesk Support and Chat accounts which had been accessed by an unauthorized third party.

Although this number contained some trial accounts and others that are no longer active, Zendesk has a number of high-profile clients including Airbnb, Uber and OpenTable that could be affected.

There’s apparently no evidence that ticket data was accessed. However, email addresses, names and phone numbers of agents and end users of certain Zendesk products up to November 2016 were accessed, as well as hashed and salted agent and end user passwords. In this context, “agents” are the customer support staff from client organizations who use the software, while “end users” are their customers.

The firm said there’s no evidence these passwords were used to access Zendesk services.

In addition, for around 700 accounts, the TLS encryption keys and the configuration settings of apps installed from the Zendesk app marketplace or private apps were accessed.

“As a precautionary measure, in the next 24 hours, we are starting to implement password rotat ..

Support the originator by clicking the read the rest link below.