Adobe hacked, 3 million accounts compromised

Adobe has announced that it has become the target of a major cyber attack, in which personal customer data is at risk. It is about the compromise of almost three million accounts and the leakage of source texts of products , including Adobe Acrobat, ColdFusion, ColdFusion Builder. According to the company, the attackers managed to get access to such personal customer data [in encrypted form] such as: account data (login, password) / customer ID, credit card numbers and other important information.

Our investigation currently indicates that your customer’s IDs are encrypted and passwords on our systems. We’ve also received information on our customers, including customer orders. At this time, we removed the decrypted credit card or debit card from our systems. We deeply regret that this occurred. We’re working diligently internally, as well as to address the incident.

')
The report emphasizes that during the investigation the company did not detect the use of 0day vulnerabilities in the products.

We are not aware of any zero-day exploits targeting any Adobe products. However, there is no need for additional software, it can be used for all applications. These steps are intended to help mitigate attacks targeting older, unpatched, or improperly configured deployments of Adobe products.

More information krebsonsecurity.com/2013/10/adobe-to-announce-source-code-customer-data-breach .