Further to Reddit's recent woes since the announcement of the API pricing change, claims have surfaced that it has suffered a data breach at the hands of BlackCat , with 80GB of zipped data taken.

cross-posted from: https://chat.maiion.com/post/3401

Reddit’s week appears to have gone from bad to worse, as AlphV (aka BlackCat) has claimed that operators broke into Reddit’s servers on February 5, 2023, and took 80 GB of zipped data. . Furthermore, Reddit has been contacted by BlackCat, once on April 13 and again on June 16, with no response and no attempt to find out what was taken. Following recent fallout from the subreddit blackouts, and the controversial comments from CEO Steve Huffman, Reddit has been having a tough time in the eyes of its users who have been reportedly leaving the platform and setting up alternatives on the fediverse (such as Lemmy or kbin), used by the Twitter alternative Mastodon.

https://www.neowin.net/news/reddit-claimed-to-have-been-hacked-by-blackcat-and-it-has-threatened-to-leak-the-data/

https://www.databreaches.net/blackcat-claims-they-hacked-reddit-and-will-leak-the-data/

  • Dr. MooseEnglish
    101•2 years ago

    Remember when reddit was hip enough to have a canary system and now they don’t even disclose hacks anymore. It’s not the same platform. Good riddance.

      • Dr. MooseEnglish
        15•2 years ago

        Good point. Didn’t notice that detail in the linked articles.

    • @[email protected]English
      14•2 years ago

      God I remember reading about Reddit’s warrant canary being taken down.

      I remember thinking that it was no big deal and it will always be the same.

      How wrong and naive I was lol

      • @[email protected]English
        8•2 years ago

        it’s so weird to me that dead canarys are not half as big a thing as I’d expect them to be
        For example, it’s been close to a decade since Apples Warrant Canary died, and still people consider Apple trustworthy with their data…

        • @[email protected]English
          2•2 years ago

          I wonder if it’s not so much that people don’t care but rather that every big tech company will inevitably receive such warrants. Even if you don’t use those services, most devices by default use the (probably backdoor-ed) NIST ECC algorithms.

          • @[email protected]English
            1•2 years ago

            phew, I doubt they are backdoored.
            after they found Dual_EC_DRBG, pretty sure people had a damn good look at all of them again.

            I’d consider the Trusted Platform Modules and Intels Management Engine and AMDs counterpart to be more likely than the open source mathematical cryptography algorithms