According the social media giant the hacker(s) gained read-only access to some of it’s systems that included source code, internal logs, users backup data and other files.

Reddit CTO Christopher Slowe admitted:

“Although this was a serious attack, the attacker did not gain write access to Reddit systems; they gained read-only access to some systems that contained backup data, source code, and other logs,”

The company is working with law enforcement authorities and has informed affected users. Mr Slowe advised users not to rely on SMS-based 2FA and use token-based 2FA. He also revealed that the head of security joined Reddit 2,5 months ago.

Not the 1s time for Reddit

Back in 2016, Reddit reset password for 100,000 users as they found out that the malicious third parties had account takeover (ATOs)

The post Reddit suffers major ‘security breach’ and hacker gained access to Reddit’s internal systems, despite SMS Two-Factor Authentication on employee accounts. appeared first on Hack Ware News.