Protecting your Buffer account

Reaching out about a bug we've fixed related to the Buffer login system

Hi there, We wanted to proactively reach out to you about a bug in our login system that we identified on Friday and resolved over the weekend. This bug affected 0.00599% of Buffer users (467 out of 7,800,000), and we have reached out to those 467 people separately. When a user logs in, we create an access token that secures their login and gives them access to Buffer. We identified a bug with this login system that made it possible in very rare cases for two accounts to share one access token. This would cause one of those Buffer users to log in to the incorrect account.  This issue is fully resolved. Our team has implemented a more secure system for granting these tokens, which ensures that all account access is private, safe, and secure. To be especially clear: No passwords were compromised. No credit card details were at risk. This was a technical bug within our system and not a malicious event or hack from an outside party.   We've taken precautions to upgrade all Buffer accounts to our new login system. If you use a Buffer mobile app, you will need to log back in; if you use a third party app (like Zapier), you will need to reconnect. Lastly, I'd like to send a big thank you to the customer who made us aware of this. We're always amazed by the community we get to serve. Dan Farrelly, CTO You're receiving this email because it is related to the security of your Buffer account. We want to make sure you're aware of any security notices, and we will only email you with security-related updates. Unsubscribe | Update your mail settings | Get help Sent by the team at Buffer 2443 Fillmore St #380-7163 San Francisco, CA 94115 USA View this email in your browser