0
Chegg, an US-based education technology company based in Santa Clara, plans to reset passwords for over 40 million users following the discovery of a security incident dating back to this year’s spring.
The company reported the hack in an 8-K form [1, 2] filed with the Securities and Exchange Commission (SEC) yesterday.
Chegg said it discovered the hack a week ago, on September 19, but that the intrusion dates back to April 29.
“An unauthorized party gained access to a Company database that hosts user data for chegg.com and certain of the Company’s family of brands such as EasyBib,” said Chegg in its SEC filing.
Also: Zaif cryptocurrency exchange loses $60 million in recent hack
An investigation is currently ongoing. Chegg said the hacker(s) “may have” gained access to user data such as names, email addresses, shipping addresses, Chegg.com usernames, and Chegg.com passwords.
The company said account passwords were protected by a hashing algorithm and were not stored in cleartext, albeit it did not mention which hashing algorithm. This is important as many of these algorithms can be broken and the passwords reverted to their plaintext forms.
Chegg said hacker(s) did not gain access to Social Security numbers nor financial information, such as payment card or bank account numbers.
The ed tech company said it plans to reset passwords and notify its userbase, estimated at over 40 million.
CNET: Equifax just took another hit from that 2017 hack
Phil Hill, an ed tech consultant who first spotted the SEC form, confirmed that Chegg had not yet started the notification process today, a day after the 8-K filing.
“I get that the company needs to notify the SEC, being a publicly traded company, but they certainly are not notifying the public very well. Seems focus is on guidance for stock price, not transparency,” said Hill.
Tech news site TechCrunch first broke the story, noting that Chegg’s stock price went down 10 percent after news of the hack hit Wall Street.
Chegg was founded in 2005 and is largely known for its online tutoring and textbook rentals services offered through the chegg.com portal.
Related stories:
Nasty piece of CSS code crashes and restarts iPhonesFragmentSmack vulnerability also affects Windows, but Microsoft patched itData breaches affect stock performance in the long run, study findsWhy the ‘fixed’ Windows EternalBlue exploit won’t dieHackers swipe card numbers from local government payment portalsChinese police arrest hacker who sold data of millions of hotel guests on the dark webAccess to over 3,000 backdoored sites sold on Russian hacking forumBroadcaster ABS-CBN customer data stolen, sent to Russian servers’Hacky hack hack’: Teen arrested for breaking into Apple’s network TechRepublic
Related Topics:
Security TV
Data Management
CXO
Data Centers
0