Zello asks users to reset their passwords, cyber incident suggests
Push-to-talk walkie-talkie app Zello has asked its users to reset their passwords following what appears to be a security incident.
Zello, which is used by 140 million users including first responders, transportation workers, hospitality staff and more, issued a notice over the past two weeks, starting Nov. 15, asking users to reset their passwords.
“Zello Security Notice – As a precaution, we ask that you reset your Zello app password for any account created before November 2, 2024,” the notice states.
“We also recommend that you change your passwords for any other online services where you may have used the same password.”
Additionally, customers have not received any information explaining why passwords need to be reset. However, the specific date before November 2 and the password reset suggest that a security incident could have allowed malicious actors to access passwords in what could be a data breach, a ransomware attack or a credential stuffing attack.
Additionally, a data breach in July 2020 saw Zello reset its users’ passwords.
“On July 8, 2020, we discovered unusual activity on one of our servers. We immediately began an investigation, notified law enforcement and hired a leading independent forensic firm to assist us,” Zello said.
“Through this investigation, we have learned that it is possible that an unauthorized party may have accessed the email addresses our users used on their Zello accounts and a hashed version of their passwords.”
