Slack, reset some user passwords, the impact of unauthorized access damage in 2015

　Slack, which develops communication tools, announced on August 18 that it has reset a password of about 1 % of Slack users, assuming new issues about unauthorized access damage that occurred in 2015.

　The accounts to reset the password are as follows.

　In March 2015, the company announced that Slack infrastructure, including a profile information database that store user names and hashed passwords, was unauthorized by individuals.The attacker inserted a code to acquire the password entered by the user when logging in.

　We have dealt with the affected user's password reset and incorporate security measures such as two -factor authentication, but this time about the authentication information of Slack, which may have received unauthorized access through the company's bug reward program.There was a new report.

　It was confirmed that many of Slack's authentication information, which could have received unauthorized access, was a account that was logged in to Slack during the security incident in 2015.It is said that there was no unauthorized access to these accounts.

　Slack calls for the use of two -factor authentication and different passwords for each service.