Adobe is looking into an apparent compromise of one of its sites, the ConnectUsers forum. The company says that it is investigating reports of an attack on the site, which is a community site for users of Adobe’s Connect conferencing software.
The reports of the compromise began to surface on Tuesday and Adobe security officials began looking into them, trying to determine whether there actually was an infiltration. It now appears that someone was able to compromise the database associated with the ConnectUsers site. The company has taken the site offline and is resetting passwords for users associated with the site.
“Adobe is currently investigating reports of a compromise of a Connectusers.com forum database. These reports first started circulating late during the day on Tuesday, November 13, 2012. At this point of our investigation, it appears that the Connectusers.com forum site was compromised by an unauthorized third party. It does not appear that any other Adobe services, including the Adobe Connect conferencing service itself, were impacted,” Guillaume Privat of Adobe said.
Connect is Adobe’s Web conferencing software. Company officials said they don’t believe that any other of the company’s properties or sites were compromised during the attack. Adobe has been a target for attackers before, most recently in September when the company admitted that attackers were able to compromise an Adobe server and obtain valid signatures on a pair of malware utilities.
Adobe officials said are still investigating the ConnectUsers attack.
“We sincerely apologize for the inconvenience this may cause to our forum members. Your security is of critical importance to us, and we appreciate your patience as we work towards restoring Connectusers.com forum services,” Privat said.
