We recently learned that a third party had obtained access to a set of Tumblr user email addresses with salted and hashed passwords from early 2013, prior to the acquisition of Tumblr by Yahoo. As soon as we became aware of this, our security team thoroughly investigated the matter. Our analysis gives us no reason to believe that this information was used to access Tumblr accounts. As a precaution, however, we will be requiring affected Tumblr users to set a new password.
For additional information on keeping your accounts secure, please visit our Account Security page.
Yeah, @staff. It’d be nice if you didn’t forcibly log people out and then lock them out until they reset their password. I mean, some people have acute email issues or other problems that make what you did frustrating to get through. If they get through it at all. Also, would it be so hard to put a pinned post on top of everyone’s dash to announce this? It’s so easy to put a “Ask random celebrity blog!” note up there but when there’s a possible security problem suddenly it’s not something you think of?
Yeah, I was kind of worried at first that tumblr itself had been hacked and it was a scam. SO.
Word of warning, nice.
Some folk no longer have access to the email account they originally created the blogs under, so that’s an issue too.
Yep, I had this happen and briefly was like whelp I might’ve been scammed gg.
