 |
| gaana.com hacked |
A couple of hours ago, a hacker name MakMan exposed a vulnerability in one of our Gaana user databases. Here's where things stand: 1/n— Satyan Gajwani (@satyangajwani) May 28, 2015
First of all, we have patched the vulnerability within an hour of its discovery, as MakMan has also acknowledged. 2/n— Satyan Gajwani (@satyangajwani) May 28, 2015
No financial or sensitive personal data beyond Gaana login credentials were accessed. No third party credentials were accessed either. 3/n— Satyan Gajwani (@satyangajwani) May 28, 2015
As we understand, the data has not been accessed or shared with anyone; MakMan was highlighting the issue, which we've recognized. 4/n— Satyan Gajwani (@satyangajwani) May 28, 2015
He himself admitted that user credentials of users were compromised and they have thats why reset all user credentials.Most of our users' data has not been compromised, but we've reset all Gaana user passwords, so all users have to make new ones. 5/n— Satyan Gajwani (@satyangajwani) May 28, 2015
Its may be OK with respect to gaana.com but its not all ok for the user who access the site with same password and email id as of Facebook.com or gmail account.
If you had a similar account details at any of other site, then your security is on stake. Please change your passwords immediately.
Although MakMan has admitted that he has not stored any data locally but if he has stored and you are using account with the same credentials on other side then its really a great problem.
Take a precaution for future: Never access two sites with same credentials.
