Menu
Xero suffers security breach

Xero suffers security breach

Online accounting company tells users to reset passwords after accounts breached

Customers of Cloud-based accounting company, Xero, have been told to reset their passwords after a ‘small number’ of customers had their details compromised.

The New Zealand-based company sent out a warning to customers via email advising them to reset their passwords following the breach.

The email claimed that Xero had seen an increase in phishing attacks exploiting its brand, and that a "small number of customers have had their Xero accounts compromised."

Xero said that its security team had been tracking “a small number of incidents”, resulting from phishing attacks.

Due to the nature of its business, Xero holds a great deal of information relating to customer finances, clients and suppliers inside accounts, a concern for users as this data relates to almost every aspect of their business.

The accounting solutions provider also warned users that they should scan their computers for malware using an up-to-date anti-virus - presumably to mitigate the effects of spyware that may be present as a result of compromised accounts.

“We strongly recommend that you update your anti-malware (anti-virus) software with the latest signatures and run a full scan of your computer before you reset your password. Please do this on all computers you use to access Xero,” the company said in a statement.

The email sent to Xero users in response to the breach
The email sent to Xero users in response to the breach


When asked for further comment, Xero provided the following statement:

"As we have been communicating for the last month, we’ve noticed an increase in the volume of phishing attacks and malware scams. This is an industry-wide problem for business software, online banking and other websites. Our security team has been tracking a small number of incidents as a result of phishing attacks or malware, where a small number of Xero usernames and passwords have been obtained. As you can appreciate, we do not discuss details about a user’s incident outside of informing the authorities or another organisation that needs to be involved.

"Our own Xero system has not been compromised in any way. Investigation by KPMG’s Cyber Security Practice has confirmed that there is no evidence that this activity is a direct attack on Xero or its security services, or that Xero systems have been compromised in any way.

"We have been building in additional system controls to give our customers further protection against such incidents. For example, on your Xero dashboard you can check when you last logged in, and the location of those logins, including IP address."


Follow Us

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Tags malwaresecurity breachxero

Brand Post

Featured

Slideshows

The Kiwi channel gathers for the 2020 Reseller News Women in ICT Awards

The Kiwi channel gathers for the 2020 Reseller News Women in ICT Awards

Hundreds of leaders from the New Zealand IT industry gathered at the Hilton in Auckland on 17 November to celebrate the finest female talent in the Kiwi channel and recognise the winners of the Reseller News Women in ICT Awards (WIICTA) 2020.

The Kiwi channel gathers for the 2020 Reseller News Women in ICT Awards
Leading female front runners honoured at the 2020 Reseller News Women in ICT Awards

Leading female front runners honoured at the 2020 Reseller News Women in ICT Awards

The leading female front runners of the New Zealand ICT industry joined together for the annual Reseller News Women in ICT Awards event at the Hilton in Auckland, during which hundreds of guests celebrated 13 outstanding individuals who won awards, chosen from more than 50 finalists representing over 30 organisations.

Leading female front runners honoured at the 2020 Reseller News Women in ICT Awards
Channel gathers to celebrate the Reseller News Innovation Awards 2020 winners

Channel gathers to celebrate the Reseller News Innovation Awards 2020 winners

More than 500 channel leaders gathered in Auckland on 21 October at the ​Reseller News Innovation Awards ​2020 to celebrate the achievements of the New Zealand technology industry's top partners, start-ups, vendors, distributors and individuals.

Channel gathers to celebrate the Reseller News Innovation Awards 2020 winners
Show Comments