Reddit breached, here's what you need to know

On Thursday, February 9, 2023, Reddit reported that it had experienced a security incident as a result of an employee being phished.

What happened?

According to Reddit, it "became aware of a sophisticated phishing campaign" late on February 5, 2023, that attempted to steal credentials and two-factor authentication tokens.

One of its employees fell for the phish, and then self-reported, alerting Reddit to what had happened. It says its "security team responded quickly, removing the infiltrator’s access and commencing an …

alerting authentication aware breached campaign credentials employee employees factor february incident phish phished phishing phishing campaign reddit result security security incident security team steal team tokens