Last.fm becomes the latest site to suffer password breach

Author

By John Glenday, Reporter

June 8, 2012 | 1 min read

Internet users who’ve recently been making a tour of website password reset functions are being forced to add Last.fm to their list after it became the latest site to find its security wanting.

A message posted on the music site’s homepage saw administrators own up to the fact that they had lost “some” of its member’s passwords, necessitating a blanket password reset request to all members.

The embarrassing breach follows similar raids on LinkedIn and eHarmony.

In their statement the firm added: “We will never email you a direct link to update your settings or ask for your password.

"We strongly recommend that your new Last.fm password is different to the password you use on other services."

Speaking to the BBC Graham Cluley, security expert at Sophos, said he worried that the spate of breaches amounted to more than “coincidence”, warning of a “common vulnerability” across the sites.

Cluley pondered: "Is this the end of the story, or is there more to come?"

Trending

Industry insights

View all
Add your own content +