Adobe breach reportedly spills easy-to-crack password hashes

Adobe officials are investigating the breach of an online user forum related to its Connect conferencing software following a report that 230 names, e-mail addresses, and cryptographically hashed passwords were leaked online.

“At this point of our investigation, it appears that the Connectusers.com forum site was compromised by an unauthorized third party,” Adobe’s Guillaume Privat wrote in a blog post published on Wednesday. “It does not appear that any other Adobe services, including the Adobe Connect conferencing service itself, were impacted.”

Adobe officials took the forum offline on Tuesday evening and are in the process of resetting passwords. Forum members will receive instructions for restoring their accounts once the forum is operational again.

Read 5 remaining paragraphs | Comments

Ars Technica » Technology Lab