The Latest Data Leak Scandal Is Called Cloudbleed And It Is A Doozy

Data leaks are now becoming a dime a dozen, but news about major breaches from huge companies is still concerning. Recently, Cloudflare has been hit with a massive data breach that has compromised the security of a lot of users. Aptly called Cloudbleed, this is likely the first serious information leak of the year and should prompt affected users to change their passwords soon.

The first to discover the issue is Tavis Ormandy, a famed coder who hunts bugs for Google. In a forum post that he made, Ormandy explained what the issue is and how it affects users.

"I'm finding private messages from major dating sites, full messages from a well-known chat service, online password manager data, frames from adult video sites, hotel bookings,” Ormandy wrote. “We're talking full HTTPS requests, client IP addresses, full responses, cookies, passwords, keys, data, everything."

Among the entities that are affected by this breach include OKCupid, which already experienced major data problems a few months ago. More worrying is the fact that Uber and FitBit users are also vulnerable to the new data leak.

Reports of the new information vulnerability have been around since February 17, which means that Cloudflare has had 10 days to act on the issue. As of right now, the company is still trying to clean up the mess in its codes and plug up the holes in its system, Forbes. By the time they do, however, it’s likely that the bug would have already caused massive damage.

In a statement to the publication, Uber stated that the effects of Cloudbleed are limited on their end. As for OKCupid, Natalie Silvanovich from Google says that users are going to find the effects a little more problematic.

“tl;dr there's no guarantee that private message you sent on OkCupid isn't on the public internet somewhere,” Silvanovich Tweeted.