Massive Timehop data breach affects 21 million users!
Popular app Timehop, which highlights old social media posts, has been the victim of a colossal data hack. The breach has exposed the private details of more than 21 million users. Most of the data included usernames and email addresses. However, one in five affected users (that's 4.7 million people) may have also had their phone number compromised.
A spokesperson for Timehop has admitted that its users' data was able to be stolen because it didn't use two-factor authentication (2FA) on its cloud computing login.
The attack was discovered on July 4th and stopped in just over two hours. However while Timehop uncovered the breach while it was happening, and was able to halt it, the firm admits that "data was taken".
A statement on Timehop's website says that: "Some data was breached. These include names, email addresses, and some phone numbers. This affects some 21 million of our users. No private/direct messages, financial data, or social media or photo content, or Timehop data including streaks were affected."
An investigation into the incident is also looking at "the possibility of any earlier ones that may have occurred".
Timehop has also suggested that: "If you used a phone number for login, then Timehop would have had your phone number. It is recommended that you take additional security precautions with your cellular provider to ensure that your number cannot be ported."
The firm has also admitted that "access tokens" provided to Timehop by social media providers were also stolen. These tokens "could allow a malicious actor to view without permission some of your social media posts". Furthermore, while there is no evidence that this has happened, it was possible that unauthorised users could have accessed those posts.
Timehop is said to be aggressively and proactively notifying its users, partners, and customers about the breach, and all European users should have been contacted.
What should you do now?
While it is not yet clear if cybercriminals will use the stolen data, Timehop clearly failed to put necessary security measures in place to keep its users safe. And, with enough information, cybercriminals can apply for credit in your name, set up fraudulent bank accounts and access your existing accounts. So it's vital to hold them to account.
To start a compensation claim following the Timehop data breach, register with Hayes Connor Solicitors. We will keep you updated as this case progresses and let you know if and when you can claim.
It doesn't matter if you haven't lost out financially as a result of the hack. A personal data breach is a 21st-century version of being burgled and being the victim of a crime can have a significant impact on you mentally and physically. So, if the data breach has caused you stress or anxiety, then the law agrees that you are entitled to compensation.
It is also essential to keep a 'diary' or note of events since the hack. This should include things like:
- Whether your card been used without permission
- If there are any transactions that your bank has picked up that you haven't made
- If you are getting more spam or junk email with your name on it
- Are you getting more spam calls or messages
- If you are anxious or worried at the thought of people being able to access your data.