Buffer hacked, customer accounts misused to send out spam
Posted on 28 October 2013.
Buffer, the popular online service for managing one's social media presence by scheduling posts on Twitter, Facebook and LinkedIn, has announced on Saturday that they have been hacked, which resulted in a barrage of spam posts being sent out on behalf of some users.

Buffer founder and CEO Joel Gascoigne has not, at this time, shared details about how the breach happened, but has confirmed that spam has been sent out from some 30,000 Facebook accounts that users have connected to their Buffer accounts.

The company has disabled all postings to prevent more spam from going out as soon as they discovered the problem, and according to Gascoigne, they have "greatly increased security" of how they are posting to the two social networks.

They have also added encryption of OAuth access tokens and have changed all API calls to use an added security parameter.

Unfortunately, the posted spam messages cannot be deleted by Buffer, so Gascoigne invited users to check their Facebook and Twitter accounts and to delete them manually if they have been affected. Twitter users will also have to reconnect all their Twitter accounts so that they can continue with their posting.

The good news is that appears that no Buffer password were affected, and no billing or payment information was compromised, and the company is working with experts to find our just how the spammers managed to get into their systems.

The company is definitely to be complimented on their quick response and on how they are handling this incident and keeping users in the loop.


Overwhelming optimism for information security in 2015

Posted on 19 November 2014.  |  Expectations for data security next year are surprisingly optimistic given the harsh reality of 2014. Enterprise security staffers are so confident that most respondents said they would "personally guarantee that their company's customer data will be safe in 2015."

Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.

Daily digest

Receive a daily digest of the latest security news.


Thu, Nov 20th