Slack resets hundreds of thousands of passwords following data breach

Slack resets hundreds of thousands of passwords following data breach


Slack has just been made aware of additional information about a security breach that took place back in 2015, forcing the company to reset the passwords of around 1 percent of its users.


The company announced earlier this year that it has a daily userbase of over 10 million people, so this means that a huge number of users are affected by the incident no matter how much Slack tries to downplay it.

See also:


Slack commented on the incident when it happened four years ago, saying: "We were recently able to confirm that there was unauthorized access to a Slack database storing user profile information. We have since blocked this unauthorized access and made additional changes to our technical infrastructure to prevent future incidents". The company said at the time that it notified the individual users it knew to be affected, but stressed that "no financial or payment information was accessed or compromised in this attack".


But now Slack says that it has received "new information about our 2015 security incident" and it is resetting many passwords as a result. In a post about the decision, Slack says:



This announcement affects you only if you:


  • created your account before March 2015,

  • AND have not changed your password since,

  • AND your account does not require logging in via a single-sign-on (SSO) provider.

  • In other words, if you’re one of the approximately 99% who joined Slack after March 2015 or changed your password since then, this announcement does not apply to you.



    The company goes on to explain:



    We were ..

    Support the originator by clicking the read the rest link below.