Stolen Adobe account data goes public, Photoshop source code breached

In an update on the data breach disclosed earlier this month, Adobe has said that source code for Photoshop was stolen. Making matters worse, a file containing 150 million usernames and hashed passwords has appeared online, and the company says that 38 million accounts were directly impacted by the incident.

Earlier this month, Adobe announced that during a security audit in September, the company discovered that attackers had accessed customer names and IDs, encrypted passwords, encrypted credit and debit card numbers and expiration dates, as well as other data. On top of the PII lost during the incident, Adobe confirmed that source code Adobe Acrobat, ColdFusion, ColdFusion Builder and "other Adobe products," was also compromised.

Initially, Adobe said that the breach impacted 2.9 million customers worldwide. However, updated information from the company has revealed that at least 38 million users had their accounts exposed. "So far, our investigation has confirmed that the attackers obtained access to Adobe IDs and (what were at the time valid), encrypted passwords for approximately 38 million active users, Adobe's Heather Edell told CSO via email.