Reddit Details

San Francisco, California • 3200 employees • Technology

Industry

Technology

Security Incidents

Reddit is an American social news aggregation, content rating, and forum social network. Registered users submit content to the site such as links, text posts, images, and videos, which are then voted up or down by other members.

Security Incidents

Reddit Breach of Feb 2023

Severity Score

Significant

Type

Phishing Attack

Summary

In February 2023, Reddit experienced a security breach resulting from a sophisticated phishing attack targeting its employees. The threat actor successfully obtained credentials and two-factor authentication tokens, allowing unauthorized access to internal documents, code, and some internal business systems. Reddit confirmed that no user passwords or accounts were compromised, and there was no evidence of the threat actor gaining access to production systems. The breach was quickly identified, and Reddit's security team took immediate steps to contain the incident and enhance their security me...
Show more

Severity

The Reddit cyber security incident of February 2023 was severe as it involved a successful breach of Reddit's systems due to a sophisticated phishing attack that targeted an employee, leading to the compromise of internal documents, code, and business systems.

Impact

The breach impacted Reddit's systems, resulting in unauthorized access to internal resources and potentially sensitive information. While user passwords and accounts were reported as safe, the incident raised concerns about the security measures in place to protect Reddit's infrastructure.