We recently learned that some of our user data may have been improperly accessed. We have taken immediate action to contain and fix the issue, and we are continuing to investigate with assistance from external security experts.
The investigation, to date, indicates that the following types of information may have been involved:
- Email address
- Date of birth and gender (if provided)
- IP address upon sign up, if signed up before 2017
- Profile display name
- Account name and salted and cryptographically hashed passwords
- Responses provided to surveys distributed in 2015 or earlier
- List of Paid Stories and chapter titles purchased by a user
- Any third-party account IDs, such as Google or Facebook. Passwords associated with third-party accounts are not stored on our systems and are unaffected.
We want to stress that Wattpad does not store plain text passwords; all Wattpad passwords are encrypted. User stories, private messages, and phone numbers were NOT part of this incident. Financial or payment information are not stored on affected systems and, based on the investigation to date, were not affected in this incident.
Although we use encryption to store passwords, as a precaution, we are taking steps to enhance the standards we use for passwords on our platform and we are recommending you change your password on Wattpad and any other third-party accounts where you use the same password. Here is a link to our Help Centre article to guide you through the process. Please note that Wattpad will never ask you for your password except to sign in to your account, and we will only do this on the Wattpad domain. If you changed your password after July 21, you do not need to change your password again.
Practicing password hygiene — such as changing passwords on a regular basis, not using the same password more than once, and using a password manager — is highly recommended, and makes it less likely that a bad actor could gain access to accounts across services that use the same password.
The safety and security of the Wattpad community and your data is our highest priority. We are continuing to investigate this issue, and are assessing additional measures to enhance our security protocols and procedures.
- The Wattpad team