A hacker gained access to an OpenWRT administrator account over the weekend, according to posts on the project’s message boards. The hacker was able to download a community user list that contained email addresses, user handles and some statistical information about the community’s users. The exact cause of the breach, which was discovered Saturday, is still being investigated. Community members are urging community members to manually reset passwords. The U.S. Cybersecurity and Infrastructure Security Agency warned that attackers were increasingly targeting cloud services through a combination of phishing and brute-force attacks.”]
Source: https://www.databreachtoday.com/openwrt-project-community-investigating-data-breach-a-15797