Saturday, February 25, 2017

Information About the Recent Cloudflare Issue

A lock sitting on a wooden table.

You may have heard that Cloudflare, an Internet infrastructure company, announced on Thursday that it experienced a vulnerability. Their issue caused the private data of some Cloudflare customers to be exposed. Here’s a link to Cloudflare’s official blog where they explain the issue in detail.

Because we place an extremely high priority on data security and realize you may be worried, as Upwork’s head of information security I wanted to share some information.

Upwork is indeed a Cloudflare customer — one of millions. However, we believe no Upwork-related data was at risk. We’ve come to this conclusion based on discussions with Cloudflare and our own internal investigations. We consider the matter closed at this time but we will update this post if we are made aware of any new information.

Upwork takes data security very seriously and, as soon as we heard about this incident, our security team proactively reached out to Cloudflare and took the following steps:

  • Our security team spoke with and has been in constant communication with the Cloudflare team to assess any potential exposure to Upwork and our customers.
  • We requested that Cloudflare search for data belonging to Upwork and our customers. To date, the Cloudflare team has not found any Upwork-related data that was exposed.
  • We asked Cloudflare to clarify the status of the vulnerability. Cloudflare stated that they have fixed the vulnerability and are actively working to delete any remaining cached information on the Internet related to this incident.
  • In an abundance of caution, we initiated our own investigation to ensure Upwork-related data was not exposed as part of the Cloudflare incident. As mentioned above, we did not find that any Upwork-related data was exposed.

My team at Upwork is constantly vigilant in an effort to protect our community’s security. You have my commitment that with this issue and future ones like it, we will always act quickly and in your best interest to protect your data.

The post Information About the Recent Cloudflare Issue appeared first on Upwork Blog.



from Upwork Blog http://ift.tt/2lVt12L

No comments:

Post a Comment