Adobe’s network was hacked on Thursday.
Hackers stole product source codes plus usernames and passwords for almost 3 million Adobe users.
The first estimate is that around 40 GB of data was stolen. Data is currently being moved to more secure locations, according to Adobe.
Adobe has automatically changed the passwords on accounts were affected and is contacting those users.
Users who had their passwords automatically changed can use Adobe’s Password Reset page, or contact an Adobe customer care representative, to update to a new password.
In the security alert issued to account holders, Adobe recommends that users that use the same username/password combo on other sites to change their passwords on those sites as well.
The official Adobe response when asked to reveal more details about Adobe software vulnerability was:
We are not aware of any zero-day exploits targeting Adobe products. However, we recommend customers run only supported versions of the software, apply all available security updates, and follow the advice in the relevant security hardening guides.
These steps are intended to help mitigate attacks targeting older, unpatched, or improperly configured deployments of Adobe products.
Adobe is offering affected users free credit monitoring services for one year through Experian.
Also, if users contact customer care and ask to cancel a subscription because of this breach, they are being offered a free subscription of 2 months or more.