Docker Hub Hacked, sensitive data more than 190,000 accounts may have exposed. Docker Hub discovered the unauthorized access to a single Hub database On Thursday, April 25th, 2019.
Docker hub is the cloud repository which allows users to create a test, store and distribute container images. It also allows you to download the docker images built by other communities.
Docker started notifying users about the security incident. It was unclear how the hackers gained unauthorized access to a single database.
According to the companies official statement, “we’ve learned unauthorized access to a Docker Hub database, sensitive data from approximately 190,000 accounts may have been exposed (less than 5% of Hub users).”
The accessed data includes usernames, passwords, Github and Bitbucket tokens for Docker auto builds. Dockers confirm that only non-financial user data is affected.
Docker recommends users to change their password and for shared accounts. All the impacted accounts GitHub tokens and access keys, so the user’s with auto builds are impacted.
Impacted users need to reconnect to the repositories and the users are recommended to check with security logs for any unauthorized access.
“We are enhancing our overall security processes and reviewing our policies. Additional monitoring tools are now in place. Our investigation is still ongoing, and we will share more information as it becomes available,” reads breach report.
Last year attacker’s made a way to docker for mining cryptocurrencies. They pushed malicious images to a Docker Hub registry and pulling it from the victim’s system, hackers were able to mine 544.74 Monero.
Also Read
