Backup service Carbonite resets passwords after account intrusion attempts

Backup service Carbonite has sent all its customers an email to reset their password. The company is doing this after malicious parties tried to log into accounts with usernames and passwords from other hacks.

Users are complaining under the blog about the incident that the email looks suspicious. For example, there is a large button with ‘change your password’, after which users are directed to the site to reset the password without having to enter the old password. Users say it looks like a fake email. The screenshot of the mail comes from tweaker mvdam.

Carbonite resets all passwords, as it has found that malicious parties were trying to access accounts with suspected usernames and passwords from other hacks, presumably like LinkedIn’s. The company has no indication that the usernames and passwords were stolen in a hack of Carbonite itself. However, malicious parties seem to have gained access to some accounts.

Carbonite is a backup service for private files, such as photos and videos. It claims to have more than one and a half million customers.