Change Your Unifi Passwords

Got this message today. It's also posted to their community forums.

Dear Customer,

We recently became aware of unauthorized access to certain of our information technology systems hosted by a third party cloud provider. We have no indication that there has been unauthorized activity with respect to any user’s account.

We are not currently aware of evidence of access to any databases that host user data, but we cannot be certain that user data has not been exposed. This data may include your name, email address, and the one-way encrypted password to your account (in technical terms, the passwords are hashed and salted). The data may also include your address and phone number if you have provided that to us.

As a precaution, we encourage you to change your password. We recommend that you also change your password on any website where you use the same user ID or password. Finally, we recommend that you enable two-factor authentication on your Ubiquiti accounts if you have not already done so.

[Change Password]
[Enable Two-Factor Authentication]

We apologize for, and deeply regret, any inconvenience this may cause you. We take the security of your information very seriously and appreciate your continued trust.

Thank you,
Ubiquiti Team

I received the same message tonight. Passwords changed.

FYI - If anyone uses SolarWinds products like Email Spam Filtering be mindful. Several of my clients were part of the hack and have seen increased Phishing Emails. One actually clicked on it and got the ransomeware installed. It was a government agency and we got notified by the Secret Service of the breech. Luckily we got the computer offline before anything could go out.

I guess 2factor auth. should be done everywhere


Sent from my iPhone using Tapatalk

I already had 2FA turned on.

Password now changed.