Security incident at WeTransfer causes information leakage

WeTransfer, a file-sharing platform, has issued a statement reporting a security incident on June 16 and 17 and, as a result, could not guarantee that the shipments of 232,000 users have reached the intended recipients.

The company explained that a cybercriminal added new recipients to his service's e-mails, causing the files to be scheduled to reach both the original recipients the users had selected and the additional recipients set by the attacker.

When the problem was detected, WeTransfer cancelled all download links, contacted affected users, reset passwords and reported the incident to the relevant data protection authorities.