FW: [Security] Requiring Changing W3C Passwords - IMPORTANT!

Folks,

Please see below the request for W3C account password change. The extent of the security breach is unknown and the working assumption is that all passwords could be compromised. If you have a member account with W3C - please go ahead and edit your profile to change the password. Some of you, if you made an attempt to access the account or interact with protected resources may have gotten an online notification and changed their passwords already - if this is the case no further changes are necessary.

If you do not know your current password it can be recovered via:
http://www.w3.org/accounts/recover 

Regards,
Vlad


-----Original Message-----
From: Ted Guild [mailto:ted@w3.org] 
Sent: Wednesday, February 26, 2014 2:24 PM
To: chairs@w3.org; w3c-ac-members@w3.org
Subject: [Security] Requiring Changing W3C Passwords

W3C has discovered unauthorized access to its user database which included the retrieval of encrypted passwords.  Given time the attacker can break the encryption and use those passwords.  As such W3C is requiring all of its users to change their password.

We are initially notifying Staff, Group Chairs and Advisory Committee Representatives before alerting the rest of our community and making a public statement.  We will ask for your cooperation to communicate this to your Groups and Participants sponsored by your organization.

Please go to your W3C Profile and reset the password.

https://www.w3.org/users/myprofile/edit/password


--
Ted Guild <ted@w3.org>
W3C Systems Team
http://www.w3.org

Received on Friday, 28 February 2014 14:38:51 UTC