Blur password manager Data Breach
Blur password manager is a service that is used to increases a user’s privacy by offering password management, masked phone number, masked credit card, and masked email addresses so that you do not need to expose your sensitive information online
Abine, the creator of Blur password manager, that provides privacy protection service, revelled data breach of nearly 2.4 million Blur users.
.
Abine Blur lets user’s shop online without revealing your actual email address, phone number, or credit card number, and it manages your passwords, too.
When a security researcher contacted the company about a server that exposed a file containing sensitive information about Blur users, Abine spokesperson told ZdNet via email
The Abine creator of Blur password manager, said they initial report with an internal security audit to determine the size of the breach.
According to Abine, the file that was left freely accessible online contained various details about Blur users who registered before jan 6, 2018.exposed information included:
· Some users first and last names
· Each users last and second-to-last IP addresses used to login to blur
· Each user’s encrypted Blur password. These encrypted passwords are encrypted and hashed before they are transmitted to our servers, and they are then encrypted using bcrypt with a unique salt for every user. The output of this encryption process for these users was potentially exposed, not actual user passwords.
Abine said that there is no evidence that any sensitive data such as customer’s payment information, stored masked email or phone numbers were exposed.
To be safe, Abine is requesting users to change their Blur master password and enable two-factor authentication for their account .
“as a privacy and security focused company this incident is embarrassing and frustrating” Abine said.
No comments
Post a Comment
Note: only a member of this blog may post a comment.