If you've ever used the service Timehop, you should be aware that it recently had a serious security breach.
Timehop, a service that resurfaces old social media posts, says that on July 4th, 2018, a network intrusion led to a user data breach. The company learned of the breach as it was happening and was able to stop it, but not before it accessed data to 21 million users.
The user data that was accessed includes names, email addresses, and some phone numbers. Timehop also says that keys that let the service read and show you social media posts were breached and so they've been deactivated, which means you'll have to reauthenticate the app. No private messages, financial info, social media and photo content, or Timehop data was breached, and Timehop says it has no evidence that accounts were accessed without authorization.
Users will need to log in to Timehop again and reauthenticate all of the services that they want to use with Timehop. Any users that logged in to Timehop with their phone number should contact their carrier about adding security to their account so that their phone number can't be ported.
Timehop says that it is investigating the situation and is working with a cyber security incident firm to ensure that no follow-up attacks are in progress and to create a recovery architecture.
While Timehop does say that it has no evidence that accounts were accessed without authorization, this is still a serious security breach. Important personal information like names and phone numbers were breached, and there were 21 million people who had their personal data affected. If you've ever used Timehop, you should call up your cell carrier and ask them to help you secure your account so that attackers can't port your phone number without your knowledge.
