Ubuntu forum was hacked , and 1.8 million password was stolen according to announcements by ubuntu forum . according to reports hackers breached security because the ubuntu forum was using outdated vbuletin forum software . hackers defaced siteat the time of defacing main page was redirecting some page with image.
What we know
- Unfortunately the attackers have gotten every user’s local username, password, and email address from the Ubuntu Forums database.
- The passwords are not stored in plain text. However, if you were using the same password as your Ubuntu Forums one on another service (such as email), you are strongly encouraged to change the password on the other service ASAP.
- Ubuntu One, Launchpad and other Ubuntu/Canonical services are NOT affected by the breach.
accoding http://blog.sucuri.net/ vbuletin use MD5 hash and all the passwords was hashed with MD5 . if you used same password elsewhere along with ubuntu forum then change your password
UPDATE :
canonicals posted about breach in blog post
There has been a security breach on the Ubuntu Forums site, ubuntuforums.org. We take information security and user privacy very seriously, and apologise for the breach and ensuing inconvenience.
