"Hello,
This weekend, our Security Intelligence Team detected an incident affecting HipChat.com that may have resulted in unauthorized access to user account information (including name, email address and hashed password). HipChat hashes passwords using bcrypt with a random salt. In our security investigation, we found no evidence of unauthorized access to financial and/or credit card information. We can also confirm that we have found no evidence of other Atlassian systems or products being affected. As an added precaution, we have reset the password for your HipChat account. Please go to
https://www.hipchat.com/forgot_password and enter your email address to trigger a password reset email for your
HipChat | Group Chat, Video Chat, Screen Sharing for Teams account. If you have been using your HipChat password on other sites, services or online accounts, we recommend that you immediately change those passwords as well. Please refer to the HipChat Blog at
HipChat Blog | HipChat News, Updates, Tips & Best Practices for additional information about this incident. We regret any disruption this may have caused and appreciate your immediate attention. If you have questions, please do not hesitate to contact HipChat Support via our support portal or by sending email directly to
[email protected].
– Ganesh Krishnan, Chief Security Officer "
