Call us Toll Free (USA): 1-833-844-9468     International: +1-603-280-4451 M-F 8am to 6pm EST

Drupal data breach exposes data of 1 million users

By Pierluigi Paganini, Editor-in-Chief, CDM

Jun 04, 2013, 03:30 pm EST

A Drupal data breach was announced by the official Drupal Association, Drupal hit by a large-scale data violation that could have exposed data for nearly one million accounts.

The news has been provided by The Drupal Association with an official notice, the security of the open source content management system has been compromised, as countermeasure it is resetting the passwords for nearly one million accounts in the wake of a data breach.

Unknown hackers have exploited a known vulnerability in a third-party software that was installed on the server infrastructure to access to the system, The hasn’t revealed the name of the third-party application exploited during the attack.

Evidence of the Drupal data breach was found during a routine security audit:

“Upon discovering the files during a security audit, we shut down the website to mitigate any possible ongoing security issues related to the files,” “The Drupal security team then began forensic evaluations and discovered that user account information had been accessed via this vulnerability.”

“The Security Team and Infrastructure Team have discovered unauthorized access to account information on and

This access was accomplished via third-party software installed on the server infrastructure, and was not the result of vulnerability within Drupal itself. This notice applies specifically to user account data stored on and, and not to sites running Drupal generally.”

The Drupal data breach is considerably really serious about user’s security, an impressive amount of web sites is based on the popular content management, according the official notice information exposed for almost one million accounts includes usernames, email addresses, and country information, as well as hashed passwords.

The Security Team confirmed the “unauthorized access” to their system, highlighting that there’s no evidence that any information was actually stolen. As a precautionary measure was requested all users to reset their passwords at their next login attempt.

Holly Ross, Executive Director for Drupal Association confirmed that they are investigating on the incident that could have exposed also other info:

“We are still investigating the incident and may learn about other types of information compromised, in which case we will notify you accordingly,”

The attacks to Open Source CMS solutions are not an isolated cases due their large diffusion, in the past Joomla and WordPress platforms were hit and used to spread malicious code, WordPress recently was hit by a massive “brute-force” attack by botnet composed by almost 100,000 bots.


It’s easy to predict that this kind of attacks is likely to increase for the large-diffusion of these platforms which makes them privileged targets.

(Source: CDM & Security Affairs – Hacking)

cyberdefensegenius - ai chatbot

12th Anniversary Top InfoSec Innovator & Black Unicorn Awards for 2024 are now Open! Finalists Notified Before BlackHat USA 2024...