GitHub Says Some Accounts Compromised

GitHub has announced that a hacker has compromised some user accounts by using the password and email accounts that were released in the latest breaches, thought to be primarily from the LinkedIn hack.

Shawn Davenport, VP of Security at GitHub, said: “This appears to be the result of an attacker using lists of email addresses and passwords from other online services that have been compromised in the past, and trying them on GitHub accounts.”

GitHub does not know which hacked site was used in the attempt to log into user accounts. But it does make a case for the reuse of passwords on multiple sites.

“We encourage all users to practice good password hygiene and enable two-factor authentication to protect your account,” Davenport said.

Source: Venture Beat