OneProvider user data leak occurred, it is recommended to change the password as soon as possible

A user data leak occurred in OneProvider. In theory, it should have sent emails to all users. The strange thing is that I did not receive the email. I saw it in hostloc. There may be other users who did not receive the email, so I would like to share it here. Everyone If you have a OneProvider account, it is recommended to change the password as soon as possible. If you have a OneProvider VPS, it is recommended to change the root password as well.

In addition, OneProvider’s LeaseWeb datacenter in Hong Kong is now completely out of service. The three networks are basically in the United States and cannot be used, and some areas are not spared.

Source: https://www.hostloc.com/thread-523882-1-1.html

1. Original email text

Dear customer,

We have discovered on February 18th an unauthorized access to a frontend entity of our infrastructure. Following investigation, it was determined that a limited amount of customer data was briefly consulted. While the unauthorized access was rapidly contained, the affected customers were immediately informed of the details in a separate message.

On February 21th, we have found that the incident was unfortunately more important than we originally believed. It is highly likely that a deprecated database backup, dating from December 2016, was partially retrieved.

The retrieved portions of the database contained: Customer Information, including hashed login passwords (to OnePanel).

The database does not contain payment information.

Because we take this situation very seriously, we have taken every appropriate measure to further secure our infrastructure and increase our security.

While your services are unlikely to have been compromised, we would like to remind you to make a habit of always changing the root passwords of your newly delivered servers.

As an additional measure of security, we have implemented an automatic password update feature that will prompt you to update your password every 6 months. You will see this feature upon your next login. We have also reset accesses for all inactive accounts. We also remind you that you can monitor the activity of your account at any time in the 'Account' section in both the “Activity Log” menu and the “Sessions” tab in the Account page.

We deeply apologize for what we realize is a grave situation, and for any inconvenience caused. Your account managers and our support team remain available for any questions you may have, or to assist you in examining as well as securing your infrastructure. We are taking the necessary steps with the concerned authorities.

Regards,

OneProvider.com

2. Machine translation

Dear Customer,

On February 18, we discovered a front-end entity that had unauthorized access to our infrastructure. After investigation, it was determined that a limited amount of customer data had been briefly consulted. While the unauthorized access was quickly contained, affected customers were immediately notified of details via a separate message.

On February 21, we discovered that the incident was unfortunately more significant than we originally thought. Partial retrieval of deprecated database backups is likely to have been partially retrieved starting in December 2016.

The database portion retrieved contains: Customer information, including hashed login password (to OnePanel).

This database does not contain payment information.

Because we take this situation very seriously, we are taking all appropriate steps to further protect our infrastructure and improve security.

While it is unlikely that your service will be compromised, we would like to remind you to make it a habit to always change the root password for new delivery servers.

As an additional security measure, we have implemented an automatic password update feature that will prompt you to update your password every 6 months. You will see this feature the next time you log in. We also reset access permissions for all inactive accounts. We also remind you that you can monitor your account's activity at any time in the Activity Log menu in the Account section and in the Sessions tab of the Account page.

We sincerely apologize for what we recognize to be a serious situation and for any inconvenience caused. Your account manager and our support team are available to answer any questions you may have or to assist you in checking and protecting your infrastructure. We are taking the necessary steps with the relevant authorities.

Greetings,

OneProvider.com

Recommended site searches: registration-free space, dual-line host rental, Taiwan server, space registration, domain name registration query, free all-purpose space application, reverse IP check, what is a domain name server, free space, icp registration center,