Xiaomi confirms BBS loophole

Smartphone maker Xiaomi Technology Co confirmed a security breach concerning user account privacy on a BBS it runs on Wednesday, after this was exposed in a report by wooyun.org, news portal cnstock.com reported on Wednesday.

Wooyun.org, a domestic Internet security monitoring platform, found and disclosed a loophole, which qq.com said could affect the private information of 8 million Xiaomi users, on Tuesday.

Xiaomi said hackers illegally gained access to a number of user accounts created before August 2012 on its BBS and apologized for the breach.

User accounts created after the date are safe, Xiaomi said.