Reddit suffers a security breach after a cyber attack

Reddit has published a statement specifying that, between June 14 and 18, 2018, an attacker managed to compromise the accounts of some of its employees. According to the statement, the attacker obtained the 2007 database backup. The exposed data includes user names, email addresses, encryption keys and private messages, although data writing access was not obtained, read-only access.

The employees had the authentication configured in two steps, one of them being a code received in the mobile phone through an SMS, so the attacker intercepted the SMS to get the codes.

Reddit recommends changing the password and activating the two steps authentication, for which it has chosen to use the Google Authenticator service.