Skip to main content

A Snapchat data breach may have compromised employee data

snapchat stories your 2017 story app snap chat smartphone ios android
Image used with permission by copyright holder
Snapchat’s messages may disappear, but that doesn’t mean its employees want their personal data to do the same. When it comes to breaches, it’s not just consumers who can become victims — the inner workings of companies are at risk too. On Sunday, Snapchat disclosed that an employee “fell for a phishing scam and revealed some payroll information about our employees,” compromising the identities some of its current and former employees.

“Last Friday, Snapchat’s payroll department was targeted by an isolated email phishing scam in which a scammer impersonated our chief executive officer and asked for employee payroll information,” Snapchat explained in its blog post. “Unfortunately, the phishing email wasn’t recognized for what it was — a scam — and payroll information about some current and former employees was disclosed externally.”

Happily, the app insists, “None of our internal systems were breached, and no user information was accessed.”

This is by no means the first time that the company has had issues with hacks and breaches, though generally, they’ve affected users and not employees. In 2014, the ephemeral application leaked around 200,000 photos, though it passed the blame onto unofficial third-party apps. This time, however, the fault lies squarely on Snapchat, and only those closest to the company appear to be impacted.

While Snapchat hasn’t revealed exactly what sort of data was compromised, payroll information typically includes things like salary data, social security numbers, bank information, addresses, emails, and other forms of identification that could be combined to create quite the problem for Snapchat employees. The FBI has been alerted to the breach, and all affected employees are reportedly being offered two years of identity theft insurance and monitoring free of charge.

“When something like this happens, all you can do is own up to your mistake, take care of the people affected, and learn from what went wrong,” Snapchat said in its blog post. “To make good on that last point, we will redouble our already rigorous training programs around privacy and security in the coming weeks. Our hope is that we never have to write a blog post like this again.”

Editors' Recommendations

Lulu Chang
Former Digital Trends Contributor
Fascinated by the effects of technology on human interaction, Lulu believes that if her parents can use your new app…
Hackers just stole personal data from millions of Acer customers
acer swift 3 13 2019 review acerswift3132019

Acer has just confirmed that its servers were beached by a group of hackers called Desorden. The hackers managed to steal over 60 gigabytes worth of data containing sensitive information about millions of Acer's customers.

The compromised information includes the names, addresses, and phone numbers of several million clients, but also restricted corporate financial data.

Read more
This vaccine passport app data breach is a cautionary tale
Man frustrated at computer.

A security blunder by proof-of-vaccination app Portpass provides a reminder that third-party apps may not protect your privacy and security. According to CBC News, Portpass exposed potentially hundreds of thousands of users’ personal information on its unsecured website.

After receiving a tip that the user profiles on the app’s website were accessible by members of the public, CBC verified the claim. While on the website, CBC was able to see users’ personal information, email addresses, blood types, birthdays, phone numbers, and photo identification, including driver’s licenses and passports.

Read more
T-Mobile reveals it ended 2020 with data a breach
The T-Mobile logo on a smartphone.

T-Mobile’s new year is not off to the greatest of starts after the carrier revealed details of a security breach affecting some of its customers.

A message on T-Mobile’s website says that a recently identified security incident may have allowed hackers to steal customer data such as phone numbers, number of lines subscribed to on an account, and call-related information collected as part of the normal operation of its wireless service.

Read more