OpenWRT Forum user data stolen in weekend data breach

[gregmcc]

OpenWRT Forum user data stolen in weekend data breach

The administrators of the OpenWRT forum, a large community of enthusiasts of alternative, open-source operating systems for routers, announced a data breach.

www.bleepingcomputer.com

The attack occurred on Saturday, around 04:00 (GMT), when an unauthorized third party gained admin access to and copied a list with details about forum users and related statistical information.

The intruder used the account of an OpenWRT administrator. The intruder used the account of an OpenWRT administrator. Although the account had "a good password," additional security provided by two-factor authentication (2FA) was not active.

Email addresses and handles of the forum users have been stolen, the moderators say. They add that they believe the attacker was not able to download the forum database, meaning that passwords should be safe..

However, they reset all the passwords on the forum just to be on the safe side and invalidated all the API keys used for project development processes.