If you don’t know, Reddit is currently in a state of turmoil, as the site is trying to implement API changes that would essentially kill third-party apps. In protest of this, many subreddits have gone dark, but elsewhere people are taking further action.
The hacking group known as BlackCat managed to obtain sensitive internal information through a phishing email scam that took place in February. According to the group and a confirmation post by Reddit’s CTO, it appears that 80GB of confidential information was captured.
“The attacker gained access to some internal documents, code, as well as some internal dashboards and company systems.” reads the message. “We show no evidence of breach of our primary production systems (the parts of our stack that run Reddit and store the majority of our data).”
In addition to demanding API changes, the hackers are also demanding $4.5 million. However, since Reddit has doubled down even despite the protests, we are not sure BlackCat will have its demands met.