Follow

Verify your email and password (Auth0 hacked)

Over the weekend, Auth0 experienced a DDOS/Hack that exposed email/passwords of users on their system.  Then the hackers went into EarnHoney and tried to login with the stolen passwords.

This is what we are doing:

  • Any accounts that had changed emails this weekend are being disabled for security.
  • We are going to reset the emails, based on the information from redemptions in the last month.
  • Any redemptions from these accounts will be denied, and the points awarded back to the original owner.
  • High fraud, low ad demand countries would be blocked until further notice.
  • Changing emails, passwords, and phone numbers will require TFA authentication.

How to prevent this from happening in the future:

  • Keep your EHC password different from other applications (should do this for everything!)

0 Comments

Article is closed for comments.