Menu
Xero suffers security breach

Xero suffers security breach

Online accounting company tells users to reset passwords after accounts breached

Customers of Cloud-based accounting company, Xero, have been told to reset their passwords after a ‘small number’ of customers had their details compromised.

The New Zealand-based company sent out a warning to customers via email advising them to reset their passwords following the breach.

The email claimed that Xero had seen an increase in phishing attacks exploiting its brand, and that a "small number of customers have had their Xero accounts compromised."

Xero said that its security team had been tracking “a small number of incidents”, resulting from phishing attacks.

Due to the nature of its business, Xero holds a great deal of information relating to customer finances, clients and suppliers inside accounts, a concern for users as this data relates to almost every aspect of their business.

The accounting solutions provider also warned users that they should scan their computers for malware using an up-to-date anti-virus - presumably to mitigate the effects of spyware that may be present as a result of compromised accounts.

“We strongly recommend that you update your anti-malware (anti-virus) software with the latest signatures and run a full scan of your computer before you reset your password. Please do this on all computers you use to access Xero,” the company said in a statement.

The email sent to Xero users in response to the breach
The email sent to Xero users in response to the breach


When asked for further comment, Xero provided the following statement:

"As we have been communicating for the last month, we’ve noticed an increase in the volume of phishing attacks and malware scams. This is an industry-wide problem for business software, online banking and other websites. Our security team has been tracking a small number of incidents as a result of phishing attacks or malware, where a small number of Xero usernames and passwords have been obtained. As you can appreciate, we do not discuss details about a user’s incident outside of informing the authorities or another organisation that needs to be involved.

"Our own Xero system has not been compromised in any way. Investigation by KPMG’s Cyber Security Practice has confirmed that there is no evidence that this activity is a direct attack on Xero or its security services, or that Xero systems have been compromised in any way.

"We have been building in additional system controls to give our customers further protection against such incidents. For example, on your Xero dashboard you can check when you last logged in, and the location of those logins, including IP address."


Follow Us

Join the newsletter!

Error: Please check your email address.

Tags malwarephishingdata breachsecurity breachxero

Featured

Slideshows

Looking back at the top 15 M&A deals in NZ during 2017

Looking back at the top 15 M&A deals in NZ during 2017

In 2017, merger and acquisitions fever reached new heights in New Zealand, with a host of big name deals dominating the headlines. Reseller News recaps the most important transactions of the Kiwi channel during the past 12 months.

Looking back at the top 15 M&A deals in NZ during 2017
Kiwi channel closes 2017 with After Hours

Kiwi channel closes 2017 with After Hours

The channel in New Zealand came together to celebrate the close of 2017, as the final After Hours played out in front of a bumper Auckland crowd.

Kiwi channel closes 2017 with After Hours
Meet the top performing HP partners in NZ

Meet the top performing HP partners in NZ

HP honoured leading partners across the channel at the Partner Awards 2017 in New Zealand, recognising excellence across the entire print and personal systems portfolio.

Meet the top performing HP partners in NZ
Show Comments