Docker Hub Breached
Criminals managed to breach Docker Hub and gained access to the company database. The company admitted that during the breach, sensitive data from approximately 190,000 accounts may have been exposed. Compromised data includes usernames and hashed passwords for a small percentage of these users, as well as Github and Bitbucket tokens for Docker autobuilds.
The company sent a notice to users, “On Thursday, April 25th, 2019, we discovered unauthorized access to a single Hub database storing a subset of non-financial user data. Upon discovery, we acted quickly to intervene and secure the site.”
The company is asking users to reset their passwords.
Docker has not released any details about the breach and how the attackers managed to gain access to its database.