New on LowEndTalk? Please Register and read our Community Rules.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
Famesystems unauthorized acces detected
Due to a security issue, an unknown person got acces on a gitlab server by 09.10.26. The entrypoint was an unused network account.
Through this entrypoint, someone stole data for a database, where userdata is stored for webinterface.
Famesys write, they didnt catch connections to that database and hope it wont happen.
The hole where closed directly after its finding. The government is informed about this accident.
Famesys informs also, that per 10.19.26 all useraccounts get a password reset and have to set a new password with 2FA, if nothing changed after the dated email.
Thanked by 1oloke
Comments
'unauthorised access detected' seems a bit mild for 'they dumped our db'
TL;DR: Famesystems got hacked and their DB dumped, and they don't even know who were responsible or where they were from.
Hopefully they didn't store PW in plaintext.