lordoftheedge 2 days ago

oh god, this is much worse than I expected

pupppet 2 days ago

I just received an email stating account (photo, email, name, username, social media handles), usage (subscription plan, billing history, browser/device info, ip address), and billing details (name, address, tax id, billing email, last four digits of credit cards, expiration dates) were all compromised.

Great job, guys.

  • pupppet 2 days ago

    Comment above downvoted, Apify staff on damage control.

    • mvolfik 2 days ago

      I don't think that's anyone from us, the comment/post history doesn't appear like anyone on our team that I'd recognize.

      I am also slightly concerned the comment is being sarcastic.

      Disclaimer: I'm an Apify employee, not doing damage control, but interested what people say about us :) What I'm saying is not an official position of the company.

      • maldeh 17 hours ago

        I don’t think GP means OP was from Apify, but was highlighting the fact that OP appeared to be getting a wave of downvotes for reporting something factual.

        Unless you’re disputing that Apify acknowledged such a list of potentially compromised details to customers.

        (OP is not the only one who reported this, see https://www.reddit.com/r/apify/comments/1xv1rvs/more_details...)

        • mvolfik 10 hours ago

          ah, well, this reading makes sense.. I don't think it's true (or at least I hope it's not) though, I'm definitely not aware of anyone internally posting links that we should downvote. The mindset internally about all of this is healthy imo, luckily we're able to trace quite well which users are affected and how. So, most of the "damage control" is focused on making sure that people's workloads get interrupted as little as possible, even though we rotated all API tokens for some users.

          And then of course improving security across the board, basically all product work was dropped for some teams for this and next week. Not that security fixes would be low-prio otherwise, but there's a lot of defense in depth things that you can always improve, and people went through some huge list of AI vulnerability reports, where 95% was slop, but the rest were actually things (usually very low severity, but still) that needed to get fixed.

          Again, not an official position of the company, opinions my own.

  • ct520 1 day ago

    dang - I was just looking at them never heard of them before. Seemed like it may be useful to me for some use cases. I dont understand how they could leak that much data. What are their competitors?