Timehop Breach Exposes 21 Million Email Addresses

Timehop on mobile

Timehop, a nostalgic social media platform, has restored its services after deactivating all authorization tokens provided by other social networking sites due to a data breach.

Timehop, which resurfaces photos and posts from social media accounts, suffered a data breach July 4 that affected 21 million accounts.

Any or all of your signup name, email address and phone number.

"No private/direct messages, financial data, or social media or photo content, or Timehop data including streaks were affected", the company said.

Timehop has already invalidated all the access tokens it had on file, effectively disconnecting every Timehop account from every service and preventing any more harm being done.

Timehop admitted that the attack occurred due to lack of a multi-factor authentication that led to the compromise of an access credential to its cloud computing environment. We immediately conducted a user audit and permissions inventory; changed all passwords and keys; added multifactor authentication to all accounts in all cloud-based services (not just in our Cloud Computing Provider); revoked inappropriate permissions; increased alarming and monitoring; and performed various other technical tasks related to authentication and access management and more pervasive encryption throughout our environment.

As a result, Timehop says users may have been logged out of the app to reset all of the keys.

The attacker also grabbed access tokens and keys, which let Timehop access and display your posts from the likes of Twitter, Instagram and Facebook. "To reiterate: none of your "memories" - the social media posts & photos that Timehop stores - were accessed".

British Foreign Secretary Boris Johnson quits amid Brexit crisis
May was asked by an opposition lawmaker Monday whether she would contest a vote of confidence if one came rather than resign. May replied to his letter to say she did not agree "with your characterisation of the policy we agreed at cabinet on Friday".

Bedroom Police: Iranian Teen Detained over Instagram Dance Videos
Iran's judiciary and security forces are dominated by hard-liners who launch periodic crackdowns on behavior deemed un-Islamic. As in Hojabri's case, Iranian TV did not show the faces of the individuals making the confessions.

England fans celebrate World Cup win over Sweden at IKEA
In Stratford, cheering crowds celebrating England's 2-0 win entered one of Sweden's flagship home stores and began "trashing" it. Match of the Day host Gary Lineker, who fronted the coverage of the quarter-final, said: "Humongous figures again for England ".

"The damage was limited because of our long-standing commitment to only use the data we absolutely need to provide our service", the company wrote in part.

That's very clearly a major security failure - but one Timehop does not explicitly explain, writing only that: "We have now taken steps that include multifactor authentication to secure our authorization and access controls on all accounts".

The intrusion went undetected until July 4, when the intruder started exfiltrating the company's database. "But this employee was here for so long, from back when we were just a baby company, so it seems something got overlooked", he adds.

Some data was breached. Furthermore, the company says it's communicating with local and federal law enforcement officials while working through everything.

The company said it has notified all European Union users in accordance with the new General Data Protection Regulation, or GDPR.

Timehop users who are anxious the network intrusion and data breach might have impact their "Streak" - aka the number Timehop displays to denote how many consecutive days they have opened the app - are being reassured by the company that "we will ensure all Streaks remain unaffected by this event".

Most of the data included user names and email addresses.

Related news:

Hot News

isis-killer-beheading-video-story-top Lebanese tourist sentenced to over 8 years in prison for insulting Egypt
Jul 09, 2018 - 21:31
He also said that he hopes that the Egyptian authorities would look beyond his daughter's mistake given her young age and naivety. According to a report by The Times of Israel, the accused Mona el-Mazbouh was originally sentenced for 11 years in prison.

isis-killer-beheading-video-story-top Oil dips in nervous trading as US-China trade war looms
Jul 09, 2018 - 21:16
American crude shipments to China now stand around 400,000 barrels per day (bpd), worth $1 billion a month at current prices. London-based Brent Oil Futures for delivery in September were also higher, up 0.47 percent, traded at $77.48 per barrel.

isis-killer-beheading-video-story-top Meghan Markle's Sunny Reception
Jul 09, 2018 - 20:13
Cape Town - The Duke and Duchess stepped out at a reception for the Your Commonwealth Youth Challenge looking chic as ever. Two months after her wedding to Prince Harry , Meghan Markle's accent appears to have taken on a slightly British slant.

isis-killer-beheading-video-story-top What Giroud Has Said About Thierry Henry Coaching Belgium Is Brilliant
Jul 09, 2018 - 20:10
France and Belgium are evenly matched in a lot of departments and it could come down to which side plays better to stop the other. Ahead of Belgium's semifinal against France , Thomas Vermaelen believes that he and his Belgium teammates can win the World Cup .

Starbucks ditching plastic straws out of environmental concerns
Jul 09, 2018 - 20:10
Starbucks announced Monday it will eliminate single-use plastic straws from its more than 28,000 stores around the world. These new straws will also be made available upon request to customers who prefer or need a straw, the company said .

isis-killer-beheading-video-story-top Reddit is About to See its Biggest Ban Ever Thanks to Thanos
Jul 09, 2018 - 20:09
So, what are people posting, you might ask? Whatever happens, we'll get to watch it all fade away on July 9. Essentially, the subreddit began as a place for fans to post pro-Thanos memes and pictures.

isis-killer-beheading-video-story-top Teenager raped for months allegedly by teachers, students in Indian school
Jul 09, 2018 - 20:05
But the accused circulated the video with other school-mates and the girl was allegedly blackmailed for sex on numerous occasions. Officials in Bihar estimate that at least 250 minors and women have been raped in the state in the first six months this year.

isis-killer-beheading-video-story-top Prince Louis to be christened by Archbishop of Canterbury on Monday
Jul 09, 2018 - 19:56
Nicolas Van Custem is a longtime friend of William and Harry, and his young daughters were bridesmaids in both Prince's weddings. Prince William and his wife Catherine's third child Prince Louis will be christened and he will have six godparents.

isis-killer-beheading-video-story-top At Least One Person Killed When Helicopter Crashed Into Residential Neighborhood
Jul 09, 2018 - 19:47
Brook Sweeney, who lives across the street from a house on fire, told the newspaper the whole house shook when the crash occurred. FAA officials identified the aircraft as a R44 helicopter and said that the pilot was the only person on board.

isis-killer-beheading-video-story-top Ant-Man and the Wasp Gets Really Big Opening Weekend
Jul 09, 2018 - 19:11
Top holdover markets include China ($48.7 million), Mexico ($33.8 million), Australia ($24.6 million), and Brazil ($15.4 million). Meanwhile, " Ocean's 8 " stole another $7.7 million in 61 worldwide markets this weekend, for a global tally of $236.9 million.

isis-killer-beheading-video-story-top McLaren F1 drivers 'informed, not consulted' on changes - Fernando Alonso
Jul 09, 2018 - 19:09
"Obviously I had more experience with Andrea than Zak, who only knows Andrea for one year alone, and he wanted my opinion, and how I see also Gil".

isis-killer-beheading-video-story-top Mosquitoes In Boston Test Positive For West Nile Virus
Jul 09, 2018 - 18:58
The Lake County Health Department's Mosquito Surveillance Program coordinates mosquito trapping results throughout Lake County. Wear long, loose and light-colored clothing.

isis-killer-beheading-video-story-top Giuliani: No Reason for Trump to Consider Pardoning Cohen
Jul 09, 2018 - 18:47
Trump's tweets are the result of the president finally having the time to turn his attention to this issue and because Mr. He said an interview with Mueller could be an "attempt to trap him in perjury".

isis-killer-beheading-video-story-top United Kingdom govt into crisis as Brexit Secretary David Davis resigns
Jul 09, 2018 - 17:55
In her reply, Mrs May said she did not agree but thanked him for his work. She will face them at a meeting of the party later on Monday.

isis-killer-beheading-video-story-top Starbucks to eliminate plastic straws in all stores by 2020
Jul 09, 2018 - 17:41
The announcement from McDonald's followed an April proposal by the United Kingdom government to ban plastic straws in the country. Straws add up to only about 2,000 tons of the almost 9m tons of plastic waste that hits waters each year.