We began having this problem yesterday for about 30+ accounts. Some
passwords weren't changed, some were, and some users received a response
that they weren't valid users.. This is the response I received from Cisco..
A third-party security research organization has brought to our
attention an issue in a Cisco.com search tool that could expose
passwords for registered users. Cisco.com registered users consists of
employees, customers, partners, and other third-party users.
In order to protect our registered Cisco.com users, we’re taking the
proactive step of resetting Cisco.com passwords and instructing users to
contact CCO-locksmith to receive a new password. Users who attempt to
access the site in the meantime will receive a “failed log-in” message
with instructions on how to reset their password.
The password reset process will take place between midnight and close of
business U.S. Pacific time on August 2. Once the reset process is
finished, I’d ask that you reach out to your customers and partners and
make sure they have visited the Cisco.com site and reset their passwords.
We’re investigating the incident, and will work with outside agencies as
appropriate. The incident does not appear to be due to a weakness in our
security products and technologies or with our network infrastructure.
Thanks in advance for proactively reaching out to our customers and
partners and walking them through the minor inconvenience of resetting
their Cisco.com passwords.
Church, Chuck wrote:
I eventually got an email stating it couldn't associate my email address
with an active CCO ID. I'm guessing their system is getting backed up
because it's affecting lots of people. Next step:
"Please email [EMAIL PROTECTED] to have your correct email address
associated
with your User ID. To ensure you receive prompt attention, please
provide
all of the following details:
1 Maintenance contract or Account number you used in your registration
2 The user ID your believe you have
3 Full name
4 Company name
"
Chuck Church
Lead Design Engineer
CCIE #8776, MCNE, MCSE
Netco Government Services - Design & Implementation
1210 N. Parker Rd.
Greenville, SC 29609
Home office: 864-335-9473
Cell: 703-819-3495
[EMAIL PROTECTED]
PGP key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x4371A48D
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Mike Tancsa
Sent: Wednesday, August 03, 2005 9:52 AM
To: Dan Armstrong
Cc: [email protected]
Subject: Re: OT: Cisco.com password reset.
Same here. I didnt get a notice that it was reset, but I cannot login
---Mike
At 09:30 AM 03/08/2005, Dan Armstrong wrote:
My PW to CCO did not work this morning either. I am on hold with the
TAC
right now....
Joe Blanchard wrote:
FYI
I got an email that my CCO account's password was reset
last night. Not sure how widespread this issue was, but
I called my account contact and verified that this is
a valid email, and that my password needed to be reset.
Just a heads up.
-Joe Blanchard
--
------------------------------------------------------
Tom Sands
Chief Network Engineer
Rackspace Managed Hosting
(210)447-4065
------------------------------------------------------