{"id":32340,"date":"2014-01-03T10:38:30","date_gmt":"2014-01-03T18:38:30","guid":{"rendered":"http:\/\/blogs.mcafee.com\/?p=32340"},"modified":"2025-08-08T01:37:58","modified_gmt":"2025-08-08T08:37:58","slug":"snapchat-hacked-4-6m-phone-numbers-leaked","status":"publish","type":"post","link":"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/snapchat-hacked-4-6m-phone-numbers-leaked\/","title":{"rendered":"Snapchat Hacked: 4.6M Phone Numbers Leaked"},"content":{"rendered":"

Snapchat is, undeniably, one of the great tech success stories of 2013. The photo sharing app, known for it\u2019s deletion of photos once viewed, gained so much popularity this past year that Facebook offered the founder an astounding $4 billion to sell\u20144 times the amount they paid for Instagram back in 2012.<\/p>\n

Unfortunately, 2014 may not hold the same promise for Snapchat. As the app has grown, it has already faced a number of security concerns, such as the possibility for users to save pictures sent through the app without a sender\u2019s knowledge<\/a>. And as we usher in a New Year, it appears as though Snapchat may be facing its biggest obstacle yet\u2014the leak of 4.6 million phone numbers and associated user names. The most interesting thing about this breach? Snapchat ignored all warning signs.<\/p>\n

In August, an Australian security research team called Gibson Security published a report<\/a> detailing a very specific security vulnerability in Snapchat. Through this vulnerability, they said it was possible to hack into the app and extract phone numbers and usernames. Despite bringing this security flaw to Snapchat\u2019s attention, Gibson Security failed to receive a response from the company.<\/p>\n

On December 24, 2013 the Gibson researchers decided to take their warning a step further, and published the details<\/a> for the above mentioned security vulnerabilities\u2014including code on how to access phone numbers and create loads of dummy accounts for spam purposes. With the information now accessible to anyone with the technical know-how, Gibson Security hoped that Snapchat would address the concerns and ensure that their users\u2019 data be kept secure.<\/p>\n

Sure enough, Snapchat responded to Gibson Security on their blog<\/a> a couple of days later. The post acknowledged that a phone number leak was \u201ctheoretically\u201d possible, but said that it had \u201cadded additional counter-measures and [would] continue to make improvements to combat spam and abuse.\u201d The response from Snapchat made the security vulnerability seem almost insignificant, as the company brushed off rumors\u2014but failed to release an update for the app.<\/p>\n

And then came the leak. On January 1, Snapchat users woke up to the jilting news of a hack\u2014discovering that their phone numbers and user name information may have been posted on a website called SnapchatDB.info. Despite initial panic, it is now known that the phone numbers published were incomplete, as the hackers left off the last two digits of each number they published. The group has since taken down their database.<\/p>\n

So why did the hackers behind this massive data dump do it? The individuals claiming to be behind the hack stated to The Verge<\/a>: “Our motivation behind the release was to raise the public awareness around the issue, and also put public pressure on Snapchat to get this exploit fixed.”<\/p>\n

Once again we see an example of \u201chacking for the greater good.\u201d<\/a> This is the second time kind-minded individuals have hacked into Snapchat for no other reason than to demonstrate the security vulnerabilities present\u2014and to get Snapchat to act on these vulnerabilities. Despite failing to respond appropriately to these real security threats before they happened, Snapchat appears to be taking this latest breach very seriously. In a blog post published yesterday, Snapchat promised to issue an update preventing anything like this from happening again.<\/a><\/p>\n

Tips to Stay Secured While Using Mobile Apps<\/h2>\n

Regardless of Snapchat\u2019s apparent neglect to their own app\u2019s security, smart personal security decisions can help in cases like this, as those who did not link their Snapchat account with their phone number were not affected by the leak. Here are a few additional tips for staying secure while using mobile apps.<\/p>\n