Stack Overflow is victim of information leakage

Stack Overflow, a meeting point for developers aimed at solving queries related to the programming industry, suffered an intrusion and, as a result, a leakage of information.

The intrusion originated on 5 May following the deployment in the development environment of a build of the website. This compilation contained a bug, which allowed the attacker to gain access to the development environment and, from there, to scale to the production environment.

On May 11, the attacker was granted privileged access to the production environment by himself, and as a result, was detected and removed from the systems. For a period of six days, the attacker dedicated himself to exploring and gathering as much information as possible. 

Following systems exhaustive investigation, Stack Overflow team detected that attacker obtained information of 250 public user network, already they have been notified.

In the latest communication provided by Stack Overflow, they list the measures taken for website securitization and incident management.

References