Users complain of account hacks, but OkCupid denies a data breach

guest · Feb 10, 2019

Users complain of account hacks, but OkCupid denies a data breach
February 10, 2019
https://techcrunch.com/2019/02/10/okcupid-account-hacks/

A reader contacted TechCrunch after his account was hacked. The reader, who did not want to be named, said the hacker broke in and changed his password, locking him out of his account. Worse, they changed his email address on file, preventing him from resetting his password.

It wasn’t an isolated case. We found several cases of people saying their OkCupid account had been hacked.
Another user we spoke to eventually got his account back. “It was quite the battle,” he said. “It was two days of constant damage control until [OkCupid] finally reset the password for me.”

“There has been no security breach at OkCupid,” said Natalie Sawyer, a spokesperson for OkCupid. “All websites constantly experience account takeover attempts. There has been no increase in account takeovers on OkCupid.”
“If you use the same password on several different sites or services, then your accounts on all of them have the potential to be taken over if one site has a security breach,” says the support page.
Click to expand...

guest · Feb 10, 2019

Since when should we trust Average Joe about Hacking...?
For them getting infected by a self-downloaded keylogger is same as being hacked.

guest · Feb 11, 2019

OkCupid Users Victims of Credential Stuffing
February 11, 2019
https://www.infosecurity-magazine.com/news/okcupid-users-victims-of/

“More hackers are using credential stuffing techniques in which they take advantage of users who are not following password best practices so that they can breach multiple accounts, including business applications, by the same user.”

Consumers are often the weakest link, which is true even when it comes to protecting their own privacy. “Passwords are frequently reused across sites and legacy endpoint protection often doesn’t pick up certain malicious tools such as keyloggers,” said Terence Jackson, chief information security officer at Thycotic.
“This highlights the need for consumers to practice better cyber hygiene, for example using a password manager, avoiding risky sites and applications and maybe even avoiding services that don’t offer MFA. It’s also likely that some of the OkCupid users were phished and willingly handed over access to their accounts as phishing attacks have gotten more sophisticated and prevalent.”
Click to expand...

Log in or Sign up

Users complain of account hacks, but OkCupid denies a data breach

guest Guest

guest Guest

guest Guest

Log in or Sign up

Users complain of account hacks, but OkCupid denies a data breach

guest Guest

guest Guest

guest Guest

Useful Searches