Ubiquiti warns of possible data leaks

In an email yesterday, Ubiquiti, an American traveling on prosumer network equipment, warned its users of a possible data leak. The company has gained significant recognition in the recent past, mainly due to its modular, highly flexible and customizable portfolio of controllers, switches and wireless access points, giving potential attackers access to user account data needed to remotely manage devices.

According to the information sent by the company, there is no evidence yet that the data stored on the servers of the unnamed external cloud service was actually accessed by the attackers, but the company warns its customers to rule out the possibility that attackers may have obtained sensitive data. .

Ubiquiti’s account information includes the user’s name and email address, as well as the encrypted password, and records may include a phone number and (installation) address if provided voluntarily by the administrator. Potential data theft, experts say, is once again drawing attention to the dangers of running cloud-based configuration platforms used by Ubiquiti and similar vendors.

This time, the manufacturer recommends the usual precautions for its users, such as changing the password used to access the account and enabling two-factor authentication.