Return-path: Envelope-to: jamil.faiz@bfbio.com Delivery-date: Sun, 07 May 2017 23:10:00 -0700 Received: from mta.mailer.atlassian.com ([66.231.88.91]:55686) by ld212.inmotionhosting.com with esmtps (TLSv1:ECDHE-RSA-AES256-SHA:256) (Exim 4.87) (envelope-from ) id 1d7bre-002S9V-El for jamil.faiz@bfbio.com; Sun, 07 May 2017 23:09:58 -0700 Received: by mta.mailer.atlassian.com id h205qk163hsh for ; Mon, 8 May 2017 00:09:27 -0600 (envelope-from ) From: "Ganesh Krishnan" To: Subject: HipChat Security Notice Date: Mon, 08 May 2017 00:09:26 -0600 MIME-Version: 1.0 Reply-To: "Ganesh Krishnan" List-ID: <132689_101680512.xt.local> X-CSA-Complaints: whitelistcomplaints@eco.de x-job: 132689_101680512 Message-ID: <49bb1731-e4e2-437a-b73d-3d11a82c67da@xtinmta478.xt.local> Content-Type: multipart/alternative; boundary="tQ0lsf3Pd49s=_?:" X-Spam-Status: No, score=-1.7 X-Spam-Score: -16 X-Spam-Bar: - X-Ham-Report: Spam detection software, running on the system "ld212.inmotionhosting.com", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Atlassian Hello, Recently, our Security Intelligence Team detected an incident affecting HipChat.com that may have resulted in unauthorized access to user account information (including name, email address and hashed password). [...] Content analysis details: (-1.7 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: hipchat.com] -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [66.231.88.91 listed in list.dnswl.org] -0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3) [66.231.88.91 listed in wl.mailspike.net] -0.0 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain 0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail domains are different -0.0 SPF_PASS SPF: sender matches SPF record -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% [score: 0.0000] 0.0 HTML_MESSAGE BODY: HTML included in message -0.0 RCVD_IN_MSPIKE_WL Mailspike good senders 0.2 KAM_LOTSOFHASH Emails with lots of hash-like gibberish X-Spam-Flag: NO This is a multi-part message in MIME format. --tQ0lsf3Pd49s=_?: Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit Atlassian Hello, Recently, our Security Intelligence Team detected an incident affecting HipChat.com that may have resulted in unauthorized access to user account information (including name, email address and hashed password). >> http://click.mailer.atlassian.com/?qs=0cbb89903c503b0ba40466e7ecce64b692dc3156e799826ba6292ade0e919f142aef614ecb09f45317727ad3609657852c6c48743361c971 In our security investigation, we found no evidence of unauthorized access to financial and/or credit card information. We can also confirm that we have found no evidence of other Atlassian systems or products being affected. According to our records, your HipChat account is inactive. As a precaution, we have deleted the password for your inactive HipChat account. No action related to HipChat is required on your part. If you believe you may have used this same password on any other sites, services or online accounts, we recommend that you immediately change those passwords as well. Please refer to the HipChat Blog at for additional information about this incident. We regret any disruption this may cause and appreciate your immediate attention. >> http://click.mailer.atlassian.com/?qs=0cbb89903c503b0b63e533eafe82d9fac0aea5c6c4b24d44024ecec0919a0f20aecd73f277d60d1e390f5e7d4a0644a1e90b441e689f041b If you have questions, please do not hesitate to contact HipChat Support via our support portal >> http://click.mailer.atlassian.com/?qs=0cbb89903c503b0b1497115201f6227bb4f5015a0d7a98aceeb749255e70c9fb386e4123cc50317703e61f09c048cfe45a34277a45aa3747 or by sending email directly to support@hipchat.com . - Ganesh Krishnan, Chief Security Officer - - - - - - - - 2017 Read in browser - http://view.mailer.atlassian.com/?qs=836c7d51c23c023aec1ba665f45e07c5619715c8e69f11e0e1b922d9c49f6b193505b309b4cc3b8356515412043c79feebd3d08cc8f96ccc09f0e211461cb94de44c6dd8fe3170cb2346e51525f9e401 Privacy Policy - http://click.mailer.atlassian.com/?qs=0cbb89903c503b0bb1b4dabc7f13c5b21d279dc6e9e7d7fda23fbe621026d4b8419dd462b2215dd108ed00a8335ddd16d4ae9bef6749bd52 Contact us - http://click.mailer.atlassian.com/?qs=0cbb89903c503b0b0504b283a3d79f324cec273dc881d9bbd3117ee38dbd88ab287123f5c2584574ec3e554836577844df0465e14846ea8d Read our Blog - http://click.mailer.atlassian.com/?qs=0cbb89903c503b0b4694dd0d0dc67da31b0be3a9303730d63017c307e179768a43fb0cae5274310e25e444a023d37bad2e3bfe62aeebf6b1 Follow on Twitter - http://click.mailer.atlassian.com/?qs=0cbb89903c503b0b2603f3926bfe8ff923820f234d0ae4445f20ccece7dd17ce2ad6b1d3db4abb919ffb550d47ee8cf0f61f96ab22a8b3b6 Copyright 2017 Atlassian Pty Ltd. All rights reserved. We are located at 341 George Street, Sydney, NSW, 2000, Australia --tQ0lsf3Pd49s=_?: Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: 8bit Atlassian
 
Atlassian
 
Hello Jameel,
Recently, our Security Intelligence Team detected an incident affecting HipChat.com that may have resulted in unauthorized access to user account information (including name, email address and hashed password). In our security investigation, we found no evidence of unauthorized access to financial and/or credit card information. We can also confirm that we have found no evidence of other Atlassian systems or products being affected.
According to our records, your HipChat account is inactive. As a precaution, we have deleted the password for your inactive HipChat account. No action related to HipChat is required on your part. If you believe you may have used this same password on any other sites, services or online accounts, we recommend that you immediately change those passwords as well.
Please refer to the HipChat Blog at http://blog.hipchat.com for additional information about this incident. We regret any disruption this may cause and appreciate your immediate attention. If you have questions, please do not hesitate to contact HipChat Support via our support portal or by sending email directly to support@hipchat.com.
– Ganesh Krishnan, Chief Security Officer
Read in browser • Privacy Policy • Contact us • Read our Blog • Follow on Twitter
Copyright 2017 Atlassian Pty Ltd. All rights reserved. We are located at 341 George Street, Sydney, NSW, 2000, Australia
Atlassian
 
--tQ0lsf3Pd49s=_?:--