EiweFeb 10, 2023
BrianKrebs

I love that Reddit is doing a Ask Me Anything on their just-announced breach involving the phishing of employee credentials.

https://www.reddit.com/r/reddit/comments/10y427y/we_had_a_security_incident_heres_what_we_know/

We had a security incident. Here’s what we know.

**TL:DR** Based on our investigation so far, Reddit user passwords and accounts are safe, but on Sunday night (pacific time), Reddit systems were...

reddit
Feb 10, 2023 at 1:17pmWeb
Show threadSeth G.Feb 10, 2023
@briankrebs "Hey, Reddit, what's your mother's maiden name, the first street you lived on, and your favorite pet's name?"
Show threadRiley S. FaelanFeb 10, 2023
@briankrebs: "I am a credential-haver! Wanna ask questions about people who work hard to illegitimately have credentials?"
Show threadAaron GrattafioriFeb 10, 2023
@briankrebs I'm sure their legal team doesn't
Show threadTim BurdonFeb 10, 2023
@briankrebs agreed, it is a really great example of what to do. No one is immune to a good phish and I think it speaks well of reddit that the employee self reported.
Show threadBynkiiFeb 10, 2023
@briankrebs definitely handling it better than TMH in Tallahassee is
Show threadBijanFeb 11, 2023
@briankrebs it’s terrible that they were breached but simultaneously I absolutely love how they are handling it. It feels so in,one with their own community and culture, and it’s also incredibly transparent and informative too.