Now Hacked
EN
Data breach

Mass hijacking of Chrome extensions puts user data at risk

First reported · Last reported · 14 related reports

Attackers hijacked multiple Google Chrome extensions and injected malicious code in a supply chain attack. A campaign to steal login credentials was identified, with about 2.6 million users reportedly exposed to risk.

Key facts

Affected organization
Being confirmed
Incident type
Data breach
Occurred / detected
Not confirmed
Scale of damage
2.6 million users' data at risk of exposure
Cause / method
Supply chain attack via extension hijacking and malicious code injection
Location
Other countries

If your data was exposed

Exposed dataUsernamePassword

  1. Change your password, and also change it on any other site where you use the same one. Turn on two-factor authentication if available.

Timeline

  1. It emerged that an employee at a security startup had been hacked and the compromise used to distribute a malicious Chrome extension.
  2. Login credential theft and a supply chain attack via Chrome extensions were reported.
  3. The number of Chrome extensions injected with malicious code was put at 35.
  4. It emerged that the extension hacks had put 2.6 million users at risk of data exposure.

14 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.