A few days ago, in a public note, Flipboard stated that some hackers in previous months ' names had access to copies of some databases; this happened in two different time windows, but the company failed to estimate the actual extent of the attack, only communicating that not all users are interested in what happened.
The violations recorded occurred in two different time frames: the first occurred between June 2, 2018 and March 23, 2019, instead the second occurred this year between April 21 and April 22. Only April 23rd, Flipboard detected these intrusions.
"The survey results indicate that, between 2 June 2018 and 23 March 2019 and 21 and 22 April 2019, an unauthorized person logged in and potentially obtained copies of certain databases containing information about Flipboard users" These attacks exposed information about users who linked their account to Flipboard and hackers were able to access usernames, passwords, e-mail addresses and t Using the "salted hashing" functions, the passwords created after March 2012 are protected, the previous ones being protected by a SHA-1 hash function, weaker than the next.
As far as third party tokens are concerned, Flipboard states that it "found no evidence that the hacker has accessed third party accounts linked to Flipboard accounts of users." The company also announced that: "Flipboard has replaced or deleted all digital tokens. These tokens are no longer valid and can not therefore be used incorrectly. Before replacing or deleting the digital tokens, the access that the unauthorized person may have made to the accounts of third parties linked to Flipboard accounts varies depending on the type of linked account and the permissions that t has been granted. Accessing a new device requires a new password to be created. The service is believed to have about 150 million users per month, but not all users are interested in the attack.