Further to Reddit's recent woes since the announcement of the API pricing change, claims have surfaced that it has suffered a data breach at the hands of BlackCat , with 80GB of zipped data taken.

cross-posted from: https://chat.maiion.com/post/3401

Reddit’s week appears to have gone from bad to worse, as AlphV (aka BlackCat) has claimed that operators broke into Reddit’s servers on February 5, 2023, and took 80 GB of zipped data. . Furthermore, Reddit has been contacted by BlackCat, once on April 13 and again on June 16, with no response and no attempt to find out what was taken. Following recent fallout from the subreddit blackouts, and the controversial comments from CEO Steve Huffman, Reddit has been having a tough time in the eyes of its users who have been reportedly leaving the platform and setting up alternatives on the fediverse (such as Lemmy or kbin), used by the Twitter alternative Mastodon.

https://www.neowin.net/news/reddit-claimed-to-have-been-hacked-by-blackcat-and-it-has-threatened-to-leak-the-data/

https://www.databreaches.net/blackcat-claims-they-hacked-reddit-and-will-leak-the-data/

  • @[email protected]English
    2•1 year ago

    I’m not nearly techy enough to discuss this in detail, but I thought that reddit itself doesn’t really see that data (google password), thought it was an API that validated the log in. I’d be very happy to be corrected if wrong, however.

    • @NewEnglandBlueberryEnglish
      2•1 year ago

      Yes, that’s true for your Google password, but google does share your name, email and profile picture with the platform and “Third-party apps or services may use your email address, name, and profile picture in other ways as described in their privacy policy or elsewhere”. I’m not sure what Apple sign-in shares, but they probably give your email and name at a minimum.