BOSTON (Reuters) – American Funds, the No. 3 U.S. mutual fund family, advised some customers to change user names and passwords on Wednesday as the number of companies and people affected by the notorious “Heartbleed” bug grows.
The company sent emails to some 825,000 clients, saying they had been exposed to “a very narrow window of risk” related to “Heartbleed,” which has been described as the biggest computer security threat since the mass adoption of the Internet.
BOSTON, April 16 (Reuters) – American Funds, one of the
largest U.S. mutual funds families, sent an email to 825,000
shareholders on Wednesday advising them to change user names and
passwords, citing “a very narrow window of risk” related to the
“Heartbleed” Internet threat.
The notice said the risk applies to customers who logged
into Americanfunds.com from Dec. 12, 2013 to April 14. In
addition to changing user IDs and passwords, it advised them to
create new security questions and images, and delete history and
“cookies” from Web browsers.
BOSTON/OTTAWA (Reuters) – Canada’s tax-collection agency on Monday said the private information of about 900 people had been compromised as hackers exploited the “Heartbleed” bug, and security experts warned that more attacks are likely to follow.
The breach allowed hackers to extract social insurance numbers, which are used for employment and gaining access to government benefits, and possibly some other data, the Canada Revenue Agency said.
BOSTON (Reuters) – BlackBerry Ltd said it plans to release security updates for messaging software for Android and iOS devices by Friday to address vulnerabilities in programs related to the “Heartbleed” security threat.
Researchers last week warned they uncovered Heartbleed, a bug that targets the OpenSSL software commonly used to keep data secure, potentially allowing hackers to steal massive troves of information without leaving a trace.
BOSTON, April 11 (Reuters) – The U.S. Government warned on
Friday that hackers are attempting to exploit the ‘Heartbleed’
bug in targeted attacks by scanning networks to see if they are
It asked organizations to report any Heartbleed-related
attacks to the Department of Homeland Security, on a website
that it uses to advise critical infrastructure operators about
emerging cyber threats.