fp.

This notice is being sent on behalf of Scribd, Inc., the parent company of Scribd, Slideshare, Everand, and Fable, by Epiq, Scribd Inc.’s notification partner.

Hello,

We are writing to let you know that Scribd, Inc. recently experienced a security incident that may have affected your data.

We detected that an unauthorized third party may have gained access to certain user data in one of our systems. After investigating this activity, we found that the third party may have accessed your email address and the following of your information: last 4 digits of your credit card and country, credit card issuer, credit card expiry date, payment history (not including credit card details).

We have no evidence that this data has been misused, but we are notifying you out of an abundance of caution so that you can take steps to protect your information.

Watch for phishing

We encourage you to stay vigilant for phishing attempts by bad actors pretending to be Scribd, Inc. or Scribd, Slideshare, Everand or Fable.

Remember that Scribd, Inc. will never ask you for your username and password or other sensitive information via email or text. If you did receive a message like that:

    Don't click on any links in it. Instead type scribd.com, slideshare.net, everand.com, or fable.co directly into your browser.
    Call us at: +1-877-361-9887. Hours of operation are Monday-Friday, 11:00 a.m.-11:00 p.m., Central European Time.
    Report it through Scribd, Inc.'s Help Center.

For more information

We regret that this incident occurred and any concern it may cause you. If you have additional questions, contact the dedicated call center at +1-877-361-9887. Hours of operation are Monday-Friday, 11:00 a.m.-11:00 p.m. Central European Time.

The National Cyber Security Center has helpful guidance on how to recognize and avoid phishing scams here.

What Scribd, Inc. is doing

    We have secured the affected system and ended the unauthorized access.
    We have notified law enforcement as well as the relevant data protection authorities.
    We are working with an expert third party cybersecurity firm to strengthen our access controls and monitoring.

We value the trust you place in us with your information, and don’t take that lightly. We are deeply sorry this happened and will keep you updated if anything further changes.

Scribd, Inc.

Comments

TZubiri•3h ago

Wonder if there's anything of worth.

Hackers got their hands on a loot of 300k pirated book pdfs? And internal documents that were already leaked by someone that googled "how to share a pdf".

coldfloor•2h ago

Geez, I know nobody here clicks through and reads articles before commenting, but are we not even reading the posts now?

>we found that the third party may have accessed your email address... last 4 digits of your credit card and country, credit card issuer, credit card expiry date, payment history

TZubiri•2h ago

not even worth disclosing nowadays, almost entirely public info

derwiki•2h ago

Great reason to use privacy.com virtual cards wherever possible and online

tjwebbnorfolk•2h ago

yea, until privacy.com gets hacked

aliasxneo•2h ago

What would they do with my bank account and routing number?

Buttons840•1h ago

I'd feel a lot better if I knew some red team security researchers were going hard trying to break into critical national infrastructure, just to ensure it's not too easy, but probably this isn't happening because it would be a felony to even try. The bad guys are free to try though.

All this will tend to get blamed on AI, but AI didn't put these vulnerabilities into place. AI is just a tool that can be used to discover vulnerabilities, and the only question we have to answer is whether or not that tool should be available to regular people.

Some will try to frame the question as being about whether we should allow AI aid in cyber-security, but that's not the question. This technology isn't going away. The bad guys will have it. Nations will have it. Again, the question is, can regular people also continue to have it?

AspireOne•1h ago

Regular people are often bad guys too, you know. If the reality was "bad guys will have it. Should regular people too?" The entire core dilemma would be entirely eliminated lol.

aslilac•56m ago

imagine if we just turned off 90% of the non-critical internet for two weeks, hardened up in an absolute mad dash where everyone has access to top tier cyber models, and then afterwards we go back to business as usual. it’d be a disaster short-term but long-term would it be worse than the years of slow drip we’re about to go through? idk! I kinda think it’d be interesting to find out!

AlecSchueler•30m ago

Imagine if everyone had just stayed at home for a week in 2020.

fyredge•20m ago

That was my first thought as well. With COVID, we recognised that WFH was viable for white collar work. Perhaps a global 2 week cleanse will allow everyone to re-evaluate life priorities outside of the internet.

I see hope in what happened during the blackout in Spain/Portugal.

cpa•46m ago

It is absolutely happening, paid by your taxpayer dollars (if you’re American).

Most major countries have this kind of programs. Those could probably be bigger and they will always miss obvious stuff but they exist, at least for CNI.