Twitter hacked; 250,000 users must reset their passwords

The company said it has been targeted by hackers this week who may have made off with user names and passwords

By James Niccolai and Zach Miners, IDG News Service |  Security, Twitter

Twitter attack

Image credit: flickr/petesimon

Twitter's servers have been breached by "extremely sophisticated" hackers who may have made off with user names and passwords for about 250,000 users, the company said Friday.

Twitter said unusual access patterns led it to identify the attacks, which took place during the past week.

[10 Windows 8 tips, tricks and hacks and 20 notorious worms, viruses and botnets]

"We discovered one live attack and were able to shut it down in process moments later. However, our investigation has thus far indicated that the attackers may have had access to limited user information -- usernames, email addresses, session tokens and encrypted/salted versions of passwords -- for approximately 250,000 users," Twitter Director of Information Security Bob Lord said in a blog post.

Twitter reset the passwords and revoked session tokens for the accounts, and said it was emailing the affected users Friday and telling them to reset their passwords.

"This attack was not the work of amateurs, and we do not believe it was an isolated incident," the company said in its post.

It noted that The New York Times and The Wall Street Journal also said they'd been targeted by hackers this week. Those companies said the attacks originated in China, but Twitter did not point to a country of origin.

Twitter said it thinks other companies and organizations have recently been similarly attacked.

It urged all its users to ensure they are using strong passwords on Twitter and elsewhere on the Internet. Passwords should be at least 10 characters and use a mix of upper- and lowercase letters, as well as numbers and symbols, the site said.

"Using the same password for multiple online accounts significantly increases your odds of being compromised," Twitter said. "If you are not using good password hygiene, take a moment now to change your Twitter passwords."

Join us:
Facebook

Twitter

Pinterest

Tumblr

LinkedIn

Google+

Join us:
Facebook

Twitter

Pinterest

Tumblr

LinkedIn

Google+

Ask a Question