This week, a data leak exposed the personal information of thousands of Ring camera users. On Thursday, a BuzzFeed News report revealed the breach. The login codes of 3,672 Ring users were exposed. This compromised sensitive information, including addresses, passwords, time zones, and the names assigned to various Ring cameras. As a result, users are at risk. The exposed data could allow unauthorized access to their Ring accounts. It could also be used to target other online services.
Details of the Data Leak and Its Impact on Ring Users
Ring issued a statement on Thursday, clarifying that the company itself had not fallen victim to a data breach. The company explained that the exposed data likely came from other companies’ previous security breaches. Hackers often compile stolen data from various sources to build password lists. These lists are then used in attempts to access different online services, which is a common tactic used by bad actors.
A Ring spokesperson further commented, stating, “Our security team investigated these incidents. We found no evidence of unauthorized intrusion or compromise in Ring’s systems or network.” This suggests that Ring’s internal systems were not the source of the breach, but rather, hackers used data stolen from elsewhere to target users. Despite the potential risks, attackers did not breach Ring’s internal security measures in this incident.
Ring said it will now alert customers whose accounts have been compromised and reset their passwords. Amazon’s Company also said it allows all users to protect their accounts by requiring two-factor authentication.
According to BuzzFeed News, with the details in the data leak, hackers might reach the home address of Ring users, telephone number, and payment information. We may also be able to access live video from account-related working Ring cameras.
Check out: Top 6 DIY Smart Home Security Systems of 2019
BuzzFeed confirmed the breach by verifying the leaked information with four users whose logins had been hacked. A security expert told BuzzFeed News that the data structure indicates it may have been taken from a corporate directory rather than accessed by login stuffing, which is when previously disclosed email and password combinations are used to gain access to other accounts.
Ring’s Response to the Breach and Security Measures Moving Forward
It comes after stories of hackers hacking into Ring cameras and harassing people in their homes have circulated the world. The company also said that attackers have not compromised their business networks. The attacks resulted from consumers reusing passwords that hackers had breached in other security incidents.
Ring now faces growing privacy concerns with its intelligent doorbells to help police create a surveillance network. For more than a year, police agencies that partnered with Ring had access to a database showing the location of the wireless doorbells. This feature was removed in July.
Check out: Universal Remote Control & Programming Guide