Ubiquiti 'Catastrophic' Data Breach

By Ethan Ace, Published Mar 31, 2021, 01:49pm EDT (Info+)

Ubiquiti has grown to be a major networking supplier, growing strongly in 2020, but now the company has suffered a breach that cybersecurity researcher Krebs has called 'catastrophic'.

IPVM Image

Inside this report, we examine:

  • Details of the breach
  • Whistleblower claims
  • Potential for impact in surveillance
  • Comparison to Verkada hack
  • Ubiquiti lack of response
  • Effect on user confidence
  • Impact on Ubiquiti stock price

The **** ******

** ******* ****, ****,******** ******** ***** ** * **** breach, **** ************ ****** ** **** of ***** ******* ****** ** * "third-party ***** ********" (****** **** *** not **** *** ********). ******** **** this **** "*** *******" *****, ***** addresses, *** ****** *** ****** *********, but **** **** ***** *** ** indication ** ************ ******** ********* *** user ********.

**** ******* *********** **** ***** ****** passwords *** ****** ***-****** **************, *** did *** ***** ******** ******.

Whistleblower ****** "************"

*******,** * ***** **** ****, ******** ********** ***** ***** **** that * ************* *** ****** ******** respond ** *** ****** ********* ** as *** **** ****** **** ********'* email ******* *********, ******* ** "************."

“** *** **************** ***** **** ********, and ***** ******** *** ********* ******* to ********** ******* *********,” [*** *************] wrote ** * ****** ** *** European **** ********** **********. “*** ****** was *******, ******** **** *** ** risk, ****** ** *********’ ******* ******** in ************ *** ***** ****** *** world *** ** ****.”

*** ************* ******* ****** **** ******** legal ******* ******* ** ****** ***** of *** **** **** ** *** breach *** ***** ******** ******.

Ubiquiti *** ******* ********

*******, *** ************* ****** **** *** unnamed "*****-***** ***** ********" ********* *** simply ********'* ******* ** ****** *** Services, ***** **** ******* *** ******* by ******** **********, *** ******. ** further **** **** ********* ****** **** administrator ****** **:

"*** ******** *** ********, ********* *** S3 **** *******, *** *********** ****, all *********, *** **** ******** ***********, and ******* ******** ** ***** ****** sign-on (***) *******."

**** ***** ********'* ***** ** "** are *** ********* ***** ** ******** of ****** ** *** ********* **** host **** ****" **** ********. *** whistleblower **** **** **** ******** *** not **** ****** **** ** *********, so ** ** ******** ******** ***** not **** ***** ** **** **** was ******** ** ***.

*******, ********* **** ***** *** ********* to *** ****** *** ******** ** bitcoin (~$*.* ******* ***) ** ******** them *** ****** ***** ***** ***** hack, ****** ******** ******* *** ******* these ********* ******* ******** **** *******.

Potentially ***** ******

** *** *************'* ******** ** **** attackers ******** *** ****, ** ** possible **** *****' ******* *** **** been ********, ****** ** **** ***** no ******** ** ************ ****** ***** the ******. ***** ********'* ******** ** video *** ****** ******* *** *****, their ******** **** ********** ******* ** ***** ************ (*** our *******).

**** ***** **** ***** *** ****** of ********* ******** ******* ***** ** unlocking ***** ** *******, *** ******* impact ** ************ ******** ** *********** large. **** *** ***** ******* ***** are *******/**-** ****, **** ****** ***** disable *********, ******/*** ******** ******* ***********, or ****** *** ****** ** ***** security ******.

** ******** ********* *** ***** ** these ******* ***** ****** **** *** unauthorized ****** ***, ** **** **** not *******, ****** ********* *** ****** two-factor **************.

Compared ** ******* ****

**** ********** **** ****, ********* ** *** ******** ****** gained ****** ** ******** ******* *** administrator ***********, ** **** **** *** credentials ****** ** * *********** ******** account.

****** *** ******* ****, **** *** not * ********* ***** ***** ******* simple *******/************* ****** ** ******** *******. Only **** ********* **** **********. ********* still ***** **** ****** ** ******* passwords *** ************ ****** ******* ********.

No ******** *** **** ******** (** ***** ****)

******** *** *** ********* ** ***** on *** *************'* ***********. ***** **** they **** *** ********* ** ******** requests *** *******, *** **** **** responded ** ****** ********* ** *** story, **************.

************, ******** *** *** ********* *** ***** *********** *****' ****** (*** ** ***** main ***** ** ************* **** *****). That ****** *** ******* **** *** comments ** ** *** **** ** writing **** ** ********.

Update: ******** ******** ********* (** ***** ****)

******** *** *** ******** ********* ** Krebs ** ***** **** ******* *** has******** * ********* ** *** ******.

******** ** ******** ** ***** ******** analysis ** *** ******* **** ***** that ******** **** *** *** ********:

...****** **** **** ******* *** ******* with ******* ** *** ******** ** customer **** *** *** ******** ** our ******** ***** *** ************ ** January **.

**** **** *** *** ******** ********* to ****** **** ***** ****** ** releasing ****** **** *** **** ******** IT *********** *** ***** ******* ** have ******** ******** ****. **** **** go ** ** *** **** *** working **** *** *********** *** ****** comment *******.

*******, ******* ******* *** ** ********* ******** ** ********'* *********, *** whistleblower ****** **** ******** *** *** logging ******** ******, ** **** ****** know *** **** **** **** ********* have/do *** ****.

IPVM Image

Users ****** **********?

**** **** ** ****** ** ******* shake **** ********** ** ********. ** early *****,******** ******** ****** ******** ***** *********** made **** *****' ******* ************, **** *********** *** ******** ** issues ** **** ******* (********** ** * **-**** ***** ******). ******** **** *** **** ***** to ******* ***** ******** *** ****** operation ********** **** ******** **** ***** ***** line, ******* **** ***** ** ******** whether ** ******* ******** *** ********** ***.

*****' ****** ** ****** ** ******* increase **** *********.

Stock ***** ******** / ********* ********** *****

********'* ***** *** ****** **** **** 10% ***** *** ***** ****** *** the ***** ** ***** ******* ****** what ** *** **** * ****** ago:

IPVM Image

************, ******** *****-****** ******** (*,*) **** **** ***** ******* ******** for ********* ********** *****. ***** ***** allege **** ******** ********** ************* ********** the ******** ** *** ****** ** order ** ***** ****** ** ***** stock *****.

Vote ***

**** ** *** ****:

Comments (32)

**** **** ** ****** ** ******* shake **** ********** ** ********. ** early *****,******** ******** ****** ******** ***** *********** made **** *****' ******* ************, **** *********** *** ******** ** issues ** **** ******* (********** ** * **-**** ***** ******). ******** **** *** **** ***** to ******* ***** ******** *** ****** operation ********** **** ******** **** ***** ***** line, ******* **** ***** ** ******** whether ** ******* ******** *** ********** ***.

**** ***** *********, *** ********, *** the **** ******* ** **** ***** combined ** ****. **'* * ******* in ** **** ********* ****** ** operation. ***** ** * *****, ******* as ********** ********, ****'** **** ********* in ** **********. **** ** *** member **** ********* **** *********. * trust *****, *** ** **** ***** his ****** ** **** ** ******* on **** *** *** *********. ********** to *** ***** **** ****, ** anywhere ** ***.

Agree: 3
Disagree
Informative: 1
Unhelpful
Funny

** **** ** ******** *** ******** to *** ** **** ** ********. It's ****** *** ***** ** ****. There's **** ** ******* ** *** stock ** ***** ** ******** ** fall. ** ****** **** **.**% ** the ***, *** **** ***** **** where ** *** **** ** *********. It's **** ******** ****** ***** *** most ** *** ***.

**'** ****** **/**** ******** ******** ** the ***** ******. ***** ***** *** waiting, ** **** — ***** ******** to **** ** ******* ***** **** on ***** ****** **** ** ********.

Agree
Disagree
Informative: 3
Unhelpful
Funny

***** **** **** *** ********, *'** asked **** ******** ***** ** **** were ***** ** *** ****** *** saw *** ******* **** *****, ** addition ** **** **** ********* **** Ubiquiti ********. **** *** ****** *** of ** *** *** ***** ***** to *****. *** **** ** ** found ** ** *** ****. ** we *** *** **********, *** *** sure ** ** *** (** *** use *****), **'* ******* *** **** users ******** *** *** ******** ******.

** **** ** *** ***** ****** else ** ******* ***** **, *'* also ** ******* ** ****.

Agree: 2
Disagree
Informative: 5
Unhelpful
Funny

* ***'* ****** ********* ** ***** from ********. * *** **** ***** this ******* ***** ****** ******* ** the ****, *** ******* **** ****.

Agree: 2
Disagree
Informative: 2
Unhelpful
Funny

* *** ******* ** *****.

Agree: 3
Disagree
Informative
Unhelpful
Funny

***** ***** ***** ** ** *** last *** ****. **** **** ******* email (****) *** ***** ** ** inbox. * **** **** **** *** read ** ** **** ** *** emails * *** **** **** *** marketing. ******* * **** * ****** password *** **** ******* *** ******* but * **** **** *** **** to **. *'** **** ****** **** LastPass ** ****-****** ********* *********...***** *'** be ********** **** *******.

Agree
Disagree
Informative
Unhelpful
Funny

** ****'* *** ***** **** ********? LastPass ******** *** *** *** *** set *** ******* ** ****** **** closing *** *******. *** ***** **** password ******** ** ****** ***** **** logged ** ** *****. ** **** users * *** *** ****** ****** for ***** ******** *******. **** *** are ** * ********'* ******** *** they ****** *** ********, * ********* suggest ** ** **** ****** ****** as **'* ******** ** *****. **** choose *********** **** ********. * *** LastPass *** **** *** * *****, but ** ** *****, ** *****'* remain ****** **.

Agree
Disagree
Informative: 2
Unhelpful
Funny
Agree
Disagree
Informative: 2
Unhelpful
Funny

****** *** *** ****. * **** every ******** *** *** ** ***** is *** *** **** **** **** someone ***** **** ****** ****** ** the ******** *******. * ****** **** LastPass *** ****** *** ** * recall *********, ** **** *** ******** due ** *** ****** ********** ** place. * ***** * ** ******* for ** **** * ***** ****. She **** ****** *** ****** ******** and *** ** ***** *** *******. However, *** ***** **** *** **** and ***** ** *** *******.

* ******* ******* ** ***** **** which *****'* **** ** ****** ***** accessed ******** **** **** *****.

** ** ******** ***'* *** ***** for ********, ***** *** ******** ******** must ** ** *****. ** ******* could **** ****** ** *** ****** password **** ****** ***********, **** *******'* have *** ****** *** ** *** industry ** **** ******* ***** **** are ****** ** ** *** ******* should **** **** *********** *** **** how ** ** ***** **** **.

** **** ****'* **** *** ******* or *** * .*** ****** ****** of *** ******** *********, ****'* ** them, *** ********. ******** ***** ******* 2FA, *** *** *** **** ** going ** ****** ** *********** ** be *** *** ** ***********.

* **** **** *** ** ********* for **** ******** * ***'* ****** care ***** (**** *** ****) *** need ** ******. * ******* *** password ** ******* ** ** ******* issue. ** **'* *** *********, ** can't ******** **. ** **'* *** complex, ** **** ** ***** ** down ** ***** ** *********. ******** managers **** ***** ******* ** ***'* remember * ********* ******* ******** *** every ****** ******* *** ********* **** so **** ******** ** **** ***** of.

**** ** *** ***** **** *******; many ***** ***'* **** ****** ********* or *** ** ***** ***** ******** and **** ***'* ******* **** *** email ******* *** ** * *** to **** ********, ********** ** *** isn't ******* ** * *** ** accounts. ** **** **** ***** *** too **** ** ******* *** ******* it's ** ***** **** *** **** users *** ********* *** **** *** convenience.

Agree: 1
Disagree
Informative
Unhelpful
Funny

**********. ** *** ****** ******** ******* gets ******, ****'* ******** *** ** LastPass. *****'* *** **** ******** *** do ** *** ** ***** ***** does ********* ****. **'* ** ** Ubiquiti ** ***** ***** ****** ****** and *** *** ***** ******** ** place.

* **** ****** ***'* **** *** wrong ******* **** ****. ** **** Hunt *** **** ****** *** *****,******** ******** ***'* **** ** ** perfect, **** ****** **** *** ***** one. (******** *** *** ****************, ******)

**** ***** ***'* **** ****** ********* or *** ** ***** ***** ******** and **** ***'* ******* **** *** email ******* *** ** * *** to **** ********, ********** ** *** isn't ******* ** * *** ** accounts.

****** **

Agree: 1
Disagree
Informative: 2
Unhelpful
Funny

***** ** ***** **?

Agree
Disagree
Informative
Unhelpful
Funny

********** **********, *** ***** ****, **.

Agree: 1
Disagree
Informative: 2
Unhelpful
Funny

** **** ***** *** ********* *** enable *** *** *** **** *****.

**** ** ******** ****** *******. **********, only * ** * ******** **** affected ****.

Agree
Disagree
Informative: 1
Unhelpful
Funny

Update: ******** ******** *********

******** *** *** ******** ********* ** Krebs ** ***** **** ******* *** has******** * ********* ** *** ******.

******** ** ******** ** ***** ******** analysis ** *** ******* **** ***** that ******** **** *** *** ********:

...****** **** **** ******* *** ******* with ******* ** *** ******** ** customer **** *** *** ******** ** our ******** ***** *** ************ ** January **.

**** **** *** *** ******** ********* to ****** **** ***** ****** ** releasing ****** **** *** **** ******** IT *********** *** ***** ******* ** have ******** ******** ****. **** **** go ** ** *** **** *** working **** *** *********** *** ****** comment *******.

*******, ******* ******* *** ** ********* ******** ** ********'* *********, *** whistleblower ****** **** ******** *** *** logging ******** ******, ** **** ****** know *** **** **** **** ********* have/do *** ****.

IPVM Image

Agree
Disagree
Informative: 2
Unhelpful
Funny

********'* ****** *** ********* ****** **** discussions ** **** *****, *** * lot ** ******* **********:

IPVM Image

Agree
Disagree
Informative
Unhelpful
Funny: 1

** **** **** ***** ***** ******** for ***** *** *** **** ****** been ***** **** *** *******. ** terms ** ** *********** ********** *** majority ** ******* ** *** ** conjunction **** ***-******** ******** ******** **** not ******* *** **** ** ***** access (*******, **'*, ***...) *** **** again ***** ** *** **** ***** that ** ****** ** "******" ** manage ******** ** *** ************ ****** safeguards *** **** **** ************ *** your ******* *** *******. ********* ******** will ** * ****** **** *********** moving ******* ***** ***** ** **** using ***** ******* ***** **** ** support ** *** ******* ***** **** issue **** **** ** ******** ***** other ******* **** ****** ** ***'* use ***** ***** *** ******** *** utilize *** *** *** ***********.

Agree: 2
Disagree
Informative: 1
Unhelpful
Funny

* *** ******** ** ****. * searched ** ***** ******* *** *** account ** **** **** ******** *** I **** *** ******** *** ************ about ****.

Agree
Disagree
Informative: 1
Unhelpful
Funny

*** ************* ** **** ***** ***'* automatically ** *******, ** **** ** reported **** ** ***'* *** **** did *******; *'* *** *** *** epic **** ********* ** ****** ******* meets **. *****... *** **** **. They *** **** ****** ***** ************, and *'* *** ********* *** ************* with *** ********, * **** ***** that **** ***** ** *** *** this ***** ***** ****,

* ** **** ***** ********** ******, this ***** *** **** ***** **** a ***** ***** *** ** ****** several **** ** ***** ***** ** Ubiquiti. * **** ** **** ******* blower *** ***, **'* ******* ****** now.

Agree: 3
Disagree
Informative: 1
Unhelpful
Funny

* ** **** ***** ********** ******, this ***** *** **** ***** **** a ***** ***** *** ** ****** several **** ** ***** ***** ** Ubiquiti. * **** ** **** ******* blower *** ***, **'* ******* ****** now.

***, ****'* ********, *** ***'** ********** that *** ************* ********* * ******* crime.******* ******* - *********

* *******'* ************ *********** ... ********* as ******** ** ***** *** ******* has * ***** ** ********* ***. The *********** **************** ** **** *********** in ********* ** * ********* **** ... *********** ***** **** ** ************ *** ********** ************* ** ***'* own *** ** *** ***** ** goods ********* ** ***'* **** ** another.

Agree
Disagree
Informative
Unhelpful
Funny

***. *** * **.

Agree: 1
Disagree
Informative: 2
Unhelpful
Funny

***, * **** ***** ** **** story ***** *****.

***** **** *** **** ******* ***** about *** ************* *** ***** ** trustworthy. ** ********, ****** ******* *** ***************** ***** *** **** ** *** first ***** *** ****** ** ****** Ubiquiti *******. ***** ******** ****'* *** up, ** ***** *** ***** ** Krebs. ***** ****** * ****** ** here:******** ********* ******* **** *********, ******* 2020 “******” – ***** ** ********

***, ** ***** ************ ** ***** ***** *** **** of *** ****** ** ****. * *** **** *** ********* was ****** ******** ** *** ****, but *'* *** **** **** **** much ** ***** **.

Agree
Disagree
Informative
Unhelpful
Funny

* ***'* ************* ***** **************, *** Brian ***** *** **** ****** *** a **** **** *** ***** ***** things *********. ** ** ****** ******** that ** ***** ******* ** ***** claims ******* ********* ******* *** ************* first. **'* ******** **'* *** ******, but * ***'* ***** **'* ******.

Agree: 2
Disagree
Informative
Unhelpful
Funny

* *****. * ***'* ***** ****** it ***** ******** ** ********** ***** if *** ******* ****** ****'* ******* the *****. *** ** * ***** Krebs ****** ******** ** ********** *** whistle ******....

**** ** *** ******* ***.. ** hold * **** ***** ** ** comments. * ***** **** **** ** the **** ******* **** ** **** be *********** ** *** * **** investigation.

Agree: 1
Disagree
Informative
Unhelpful
Funny

*** ***** ** *** ** **** this ** ****** ***** ** ****** a **** *************, ** ***** ****:

“** *** **************** ***** **** ********, and ***** ******** *** ********* ******* to ********** ******* *********,” **** ***** in * ****** ** *** ******** Data ********** **********.

******* ** *** ******** **** ********** Supervisor ***, ** ******, ** **** cases, ********** **** **** ****** ******* an *************. **** ** *** ******* I ** ******* ** *** ******.

Agree: 2
Disagree
Informative: 2
Unhelpful
Funny

** **** ***** ** ***-******* *** started ******** **** ********* ***** ********** efforts *** ********** ********. **'** **** selling *** ********** ******** ***** '**. Even **** *** ******* ******** *** feature ************* ****** *** *****-****** **** always **** *** ******. ** *** many ** *** ********* **** ***** all **** ******* ***** ***** ***** services *** ***** ********** *** **** before ********* **** **** ***** ******. We **** ******** ******** ***** ********, so **** ** **** ***'* ***** their ***** ********** ******** ** ***** last *****(******** **** ******** ** *****).

Agree
Disagree
Informative
Unhelpful
Funny

*** ***** ** **** ***** ***** controller ***** *****'* ******* *** ******* using * ***** *******. * ***'* want ** *** * ***** *******. I **** ***, *** **'* *** connected ** *** **********. *** **** find **** ***** ***** ********** ***, especially ***** **** ****** *********** ** into ****.

* ***** ******** ** ****** ******* shit ** ***** ** ************* ******. They **** *** ****** **** **** want ** ** *** ***** *** then **** ** **** ****** *** excuse ** *** ****** * ***** team ** * ***** ***** *** they **** ****** *** ** * result. * **** **** **** ******** way *** **** ******** *** ******* (especially ** ****** *****) *** **** have ** ***** *********. *** *** pissed * *** ** ****** *** when ** ****'* ******* ***** ***********. They ***** *** ********* ** *** forum *** ******** ****** ** ** support. *** **** ******** * **** as ** *** ****.

*'* *** **** **** ********* **** realize **** ***** ** ***** **** without ****** ********-******* *************. ********'* ********'* aren't ********* *** ***** ** *** typical ********* ******** ********* ***'* **** as **** **** **** ******* **** base ** ***** *********** *** ****** make **** ******** ** *****.

* ***** *** ***** ********, *** I'm ****** ********* ***** ***** ********* and *** ****** **** *****'* ******* much *************.

Agree: 2
Disagree
Informative: 1
Unhelpful
Funny

*'** ***** **** **** ** * fan. * **** ***** *** ********* and **** ****** ******* *** ******** build ******* ** **** *** *********** of ***** ******** ***** ** **** or ***** **** ***** ***********.

Agree
Disagree
Informative
Unhelpful
Funny

*************, **** **** *****:Never ***** *** ******** *** * ********... *** **** ** ***** *** ****...Damn shame, highly innovative and top products. But security is often sloppy (at many companies). If all this is true, it is close to "intent".

Agree
Disagree
Informative
Unhelpful
Funny

* *****'* **** **** *** * firewall ****** ** * *** *********** applications * **** *** ***. ***** firewalls ****'* **** ***** *** ****'* very ******** ** ***** ** *** Unifi ****. * **** *** ******* firewalls **** ********'*.

*******, *** ******** ***** **** ****** then ** **** *** *** * firewall. ** *** *** *** ******* from **** *** ***** ** **** major **********, **** ***** *********** *** in *** ******* ******* * ****** of ******* **** *** ********* ** a ***** ******.

**** ***** ****** ** ** ******* to ******* ********* ** ***** *** cloud **** ********.

Agree
Disagree
Informative
Unhelpful
Funny

***** ***+ ******** *** ** *****, Ubiquiti **** ****** ************ ****** ********** *** ***** *******.

IPVM Image

* ****'* *** *** ******** ** the ******, *** * *****'* **** up **** ** ***** *** *******. I'm *** **** **** *** ********** were, *** *** ****** ** ******* that ****** ****'* *****.

Agree: 1
Disagree
Informative: 2
Unhelpful
Funny: 2

** * **** ****, ** ***** that ******** *** **** *********** *** days **** *** ** ************ ***.

******* ** ****** ** *** **** on *** **** ** ****...

Agree
Disagree
Informative
Unhelpful
Funny

Agree
Disagree
Informative: 2
Unhelpful
Funny
Login to read this IPVM report.
Why do I need to log in?
IPVM conducts reporting, tutorials and software funded by subscriber's payments enabling us to offer the most independent, accurate and in-depth information.
Loading Related Reports