Adobe confirms breach of Connectusers.com forum database, shuts down website

Adobe is in the process of resetting the passwords of all Connectusers.com forum users

Adobe has shut down Connectusers.com, a community forum site for users of its Adobe Connect Web conferencing platform, because the site's user database was compromised.

On Tuesday, a hacker named "ViruS_HimA" claimed that he hacked into "one of Adobe's servers" and copied a database containing email addresses, password hashes and other information of over 150,000 Adobe customers, partners and employees.

To support his claim, the hacker published a limited set of records for users with email addresses ending in adobe.com, .mil and .gov.

"As soon as we became aware of the hacker's post, we launched our investigation, which (based on the information leaked by the hacker) led us to determine that the hacker appears to have compromised the Connectusers.com forum site," said Wiebke Lips, Adobe's senior manager of corporate communications, Wednesday via email.

The hacker leaked 644 records, but he claimed to have accessed the entire forum database, Lips said. "The forum has a total of about 150,000 registered users."

"We are in the process of resetting the passwords of impacted Connectusers.com forum members and will reach out to those members with instructions on how to set up new passwords once the forum services are restored," Lips said.

The forum site was taken offline Tuesday evening, said Guillaume Privat, director of Adobe Connect, Wednesday in a blog post. "It does not appear that any other Adobe services, including the Adobe Connect conferencing service itself, were impacted," he said.

Privat recommended that users should follow password best practices and use different log-in credentials across different services. However, as other data leaks have shown in the past, a lot of users don't do this, which could allow hackers to break into their accounts on many other websites.

Based on an analysis of the leaked data, the password hashes -- encrypted versions of the passwords -- stored in the compromised Adobe database had been generated with MD5, a cryptographic hash function that's known to be insecure, said Tal Beery, a security researcher at security firm Imperva, via email. This means that they can easily be cracked to recover the original passwords, he said.

Join the newsletter!

Error: Please check your email address.
Rocket to Success - Your 10 Tips for Smarter ERP System Selection

Tags intrusiononline safetyImpervasecuritydata breachadobeprivacy

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Lucian Constantin

IDG News Service
Show Comments

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Sarah Ieroianni

Brother QL-820NWB Professional Label Printer

The print quality also does not disappoint, it’s clear, bold, doesn’t smudge and the text is perfectly sized.

Ratchada Dunn

Sharp PN-40TC1 Huddle Board

The Huddle Board’s built in program; Sharp Touch Viewing software allows us to easily manipulate and edit our documents (jpegs and PDFs) all at the same time on the dashboard.

George Khoury

Sharp PN-40TC1 Huddle Board

The biggest perks for me would be that it comes with easy to use and comprehensive programs that make the collaboration process a whole lot more intuitive and organic

David Coyle

Brother PocketJet PJ-773 A4 Portable Thermal Printer

I rate the printer as a 5 out of 5 stars as it has been able to fit seamlessly into my busy and mobile lifestyle.

Kurt Hegetschweiler

Brother PocketJet PJ-773 A4 Portable Thermal Printer

It’s perfect for mobile workers. Just take it out — it’s small enough to sit anywhere — turn it on, load a sheet of paper, and start printing.

Matthew Stivala

HP OfficeJet 250 Mobile Printer

The HP OfficeJet 250 Mobile Printer is a great device that fits perfectly into my fast paced and mobile lifestyle. My first impression of the printer itself was how incredibly compact and sleek the device was.

Featured Content

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?