BrowserStack suffers from hack

A hacker has broken into BrowserStack’s infrastructure. The paid service to test websites on many browsers and operating systems claims that only the email addresses from a list were accessed. Customers received an email with claims that there is more going on.

Via Twitter confirms BrowserStack that the service is experiencing a hack and the service has therefore been taken offline. A later update claims that an investigation revealed that the hacker only had access to a list of email addresses and that BrowserStack will be available again within hours. The service promises to bring an update with more information soon.

The reports follow an email that a reader of Hacker News received on Sunday, among others, which appeared to be from BrowserStack’s support department. The email claims that BrowserStack is shutting down altogether and lied about security in its terms and conditions. “We don’t use firewalls and our password policy is terrible. All virtual machines are completely open,” the email reads, which also includes a password. The e-mail probably came from the hacker who obtained the e-mail addresses of customers.

BrowserStack is a service that uses virtual machines to enable developers to test their websites on 700 browsers and 11 operating systems. The paid service claims to have 25,000 users and BrowserStack works together with Microsoft, among others.