TaskRabbit, a popular freelance labor site and app which was acquired by IKEA late last year, has been taken offline while it investigates a “cybersecurity incident.” People who use their TaskRabbit passwords on other websites or apps are being urged to change those passwords.
As of this writing, visitors to the TaskRabbit website will only find an account security update, which says TaskRabbit is “working with an outside cybersecurity firm and law enforcement to determine the specifics.” The TaskRabbit app is also down.
TaskRabbit has said little else about the incident thus far. An FAQ on the site gives a few details about what Taskers and clients should do next.
[Make and store unique passwords with a password manager. Click here for our guide to the best password managers around.]
It’s unclear how many users were affected, or what information may have been compromised, if any. But a tweet from Twitter user @SamRadocchia claims some important information may have been posted on a WordPress website (which is no longer available).
Task Rabbit phishing attack. Emails sent out pointing to website which, for a time, revealed @TaskRabbit's private Github, daily transaction volumes, key employee information. @TaskRabbit you need to look into this right now. I believe my account has been compromised. pic.twitter.com/RcT6WXhW6l
— Sam Rad 👾 (@iamSamsterdam) April 16, 2018
TaskRabbit is a site/app that sets up clients with “Taskers,” who perform everyday tasks for a fee. IKEA recently launched a specific TaskRabbit At-Home Assembly service in select cities — that service is dedicated to assembly of IKEA furniture. TaskRabbit is currently available in more than 40 metro areas.
Use Unique Passwords
As we’ve written time and time again, in a number of our quick guides to strengthening your online security — here’s our recent guide to improving Amazon security, for instance — using the same password for multiple sites is a bad idea, for the reason seen here. A breach on one site leaves you vulnerable on other sites where you use the same password.
If it’s too hard to keep your passwords in order, we recommend a password manager. Check out our full slate of password manager reviews, and our roundup of the best options.