WeTransfer Incident Shares Transferred Files with Unintended Users

WeTransfer Incident Shares Transferred Files with Unintended Users

WeTransfer files were transferred to unintended users on June 16 and 17. The scope of the incident is not clear, but the company promptly logged out affected accounts and disabled the transfer links.

  • By Kaitlyn DeHaven
  • Jun 26, 2019

WeTransfer posted a security notice on June 21 informing users of a security incident they had discovered on Monday, June 17. In the incident, WeTransfer emails including file transfer links were sent to unintended e-mail addresses for two days – June 16 and 17.

After the company discovered the security incident, they logged the users out of their accounts and deactivated the links, making the files inaccessible. For some users, they reset their passwords. Then, they sent out emails to the affected users and posted the security notice on their website. WeTransfer has stated they do not know what caused the security incident.

There is a way to password-protect your transferred files on WeTransfer, ensuring that the end user is also the intended user, but it is not available on the free version of WeTransfer.

Jamie Brown, an affected user who received a notice from WeTransfer informing him that his files had been sent to unintended users, told Naked Security the files he was transferring were not overly confidential, but others may not have been so lucky.

“Thankfully we mostly use WeTransfer for sending and receiving brand photos for use on Chicmi.com – so they’re mostly heading into the public domain anyway, and the worst that might happen is an embargo being broken for an upcoming event,” Brown said. “However, I’m sure others are not so relaxed about it, bearing in mind the way the service is used.”

WeTransfer stated that they would let their users know as soon as they had an update on the cause of the situation, but that the scope of the incident will not be revealed until they have more information.

“We understand how important our users’ data is and never take their trust in our service for granted,” WeTransfer said in a statement. “We are still investigating the complete scope and cause of the incident, and will update further as soon as possible.”

About the Author

Kaitlyn DeHaven is the Associate Content Editor for the Infrastructure Solutions Group at 1105 Media.

Featured

  • Securing the Future

    Two security experts sit down with Security Today’s editor in chief Ralph C. Jensen to discuss what they see emerging and changing over the next several years along with how security stakeholders can harness these innovations into opportunities. Read Now

  • Collaboration Made Easy Using a Work Management Platform

    Effective collaboration between security operators, teams and other departments is critical to the smooth functioning of organizations. Yet, as organizations grow in complexity, it becomes more difficult for teams to coordinate with each other. This is compounded by staffing shortages, turnover and ineffective collaboration tools. Read Now

  • Creating a Safer World

    Managing and supporting locks and door hardware within a facility is a big responsibility. A building’s security needs to change over time as occupancy and use demands evolve, which can make it even more challenging. Read Now

  • Creating More Versatility

    Today, AI has become top of mind for most security professionals. It is the topic of conversation in the technology world and continues to transform the way data is used to make important business decisions. Read Now

Most   Popular

New Products

  • ComNet CNGE6FX2TX4PoE

    The ComNet cost-efficient CNGE6FX2TX4PoE is a six-port switch that offers four Gbps TX ports that support the IEEE802.3at standard and provide up to 30 watts of PoE to PDs. It also has a dedicated FX/TX combination port as well as a single FX SFP to act as an additional port or an uplink port, giving the user additional options in managing network traffic. The CNGE6FX2TX4PoE is designed for use in unconditioned environments and typically used in perimeter surveillance.

  • HD2055 Modular Barricade

    Delta Scientific’s electric HD2055 modular shallow foundation barricade is tested to ASTM M50/P1 with negative penetration from the vehicle upon impact. With a shallow foundation of only 24 inches, the HD2055 can be installed without worrying about buried power lines and other below grade obstructions. The modular make-up of the barrier also allows you to cover wider roadways by adding additional modules to the system. The HD2055 boasts an Emergency Fast Operation of 1.5 seconds giving the guard ample time to deploy under a high threat situation.

  • AC Nio

    AC Nio

    Aiphone, a leading international manufacturer of intercom, access control, and emergency communication products, has introduced the AC Nio, its access control management software, an important addition to its new line of access control solutions.