In February, Reddit made a public announcement regarding a “security incident” where unauthorized individuals managed to gain access to certain internal documents, codes, and business systems.
This breach occurred as a result of an employee’s credentials being stolen through a successful phishing scam.
Currently, the ransomware group responsible for the attack, identified as BlackCat/ALPHV, asserts that they possess 80GB of stolen data.
Despite attempts to negotiate with the platform, no significant progress has been made.
In a post, Reddit CTO Christopher Slowe, aka KeyserSosa explained that “After successfully obtaining a single employee’s credentials, the attacker gained access to some internal docs, code, as well as some internal dashboards and business systems.“
Reddit spokesperson Gina Antonini declined to answer TechCrunch’s questions but confirmed that BlackCat’s claims relate to a cyber incident confirmed by Reddit on February 9.
At the time, Reddit CTO Christopher Slowe, or “KeyserSosa,” said that hackers had accessed employee information and internal documents during a “highly-targeted” phishing attack.
Slowe added that the company had “no evidence” that personal user data, such as passwords and accounts, had been stolen.