Ubiquiti is an American technology company that manufactures and sells wireless data communication and wired products for enterprises and homes under multiple brand names.
And this time, the company experienced a security breach, where hackers managed to access stored information about its customers on account.ui.com, a web portal for those who have purchased products from Ubiquiti. It's through this portal that customers can receive help and manage their devices from a remote location.
The data that was accessed, include customers' names, email addresses, salted and hashed passwords.
Home addresses and phone numbers may have also been exposed, but only if customers have added this information into the portal.
The company notified the incident through notification emails sent to its customers.
"We recently became aware of unauthorized access to certain of our information technology systems hosted by a third party cloud provider," Ubiquiti said in the emails, without saying the name of the cloud company.
The full email that has also been posted on its website, reads:
We are not currently aware of evidence of access to any databases that host user data, but we cannot be certain that user data has not been exposed. This data may include your name, email address, and the one-way encrypted password to your account (in technical terms, the passwords are hashed and salted). The data may also include your address and phone number if you have provided that to us.
As a precaution, we encourage you to change your password. We recommend that you also change your password on any website where you use the same user ID or password. Finally, we recommend that you enable two-factor authentication on your Ubiquiti accounts if you have not already done so.
We apologize for, and deeply regret, any inconvenience this may cause you. We take the security of your information very seriously and appreciate your continued trust.
Thank you,
Ubiquiti Team
Despite the data breach, Ubiquiti said that it had not seen any unauthorized access to customer accounts as a result of this incident.
But as a precaution, the company asks all of its customers who receive the email to change their account's passwords, and to turn on two-factor authentication.
While Ubiquiti didn't reveal how many of its customers were affected by this breach, Ubiquiti is one of the biggest sellers of networking gear, including routers, webcams and mesh networks.
