Important security update

Incident Report for Treasure Data

Resolved

This is a security update, not an outage.

As many of you know, a serious vulnerability in OpenSSL cryptographic software library was recently discovered: CVE-2014-0346 / CVE-2014-0160, commonly called the "Heartbleed Bug." This vulnerability is described at http://heartbleed.com/.

We have examined all of our infrastructure including 3rd party cloud services we're relying on, and now we took an appropriate actions including the regeneration of SSL keys and certificates. To further protect customer data, all customers are requested to change their account passwords.

Best
The Treasure Data Team.

Posted Apr 09, 2014 - 10:36 PDT