Scribd Discloses Security Incident Exposing Some User Account and Payment Data

Scribd, Inc., the parent company of Scribd, Slideshare, Everand, and Fable, has notified users of a security incident in which an unauthorized third party may have accessed certain user data. The exposed information may include users' email addresses, the last four digits of credit cards, card issuer and expiry dates, country, and payment history without full card details. The company says it has no evidence the data has been misused but is notifying users as a precaution. Scribd states it has secured the affected system, ended the unauthorized access, notified law enforcement and data protection authorities, and is working with a cybersecurity firm to strengthen access controls. Users are warned to watch for phishing and to access the company's sites directly rather than through links in suspicious messages.