Flickr Security Incident Tied to Third-Party Email System

""On February 5, 2026, we were alerted to a vulnerability in a system operated by one of our email service providers," Flickr said. "This flaw may have allowed unauthorized access to some Flickr member information. We shut down access to the affected system within hours of learning about it." The impacted service provider has not been named. Exposed information includes names, email addresses, usernames, account types, IP addresses, general location, and Flickr activity data."

"The company pointed out that passwords and payment card numbers were not affected. Flickr's notification states that certain user data may have been exposed, but it does not indicate that hackers actually accessed or stole the information; it only notes that unauthorized access could have occurred. Nevertheless, the company urged users to be cautious of Flickr-themed phishing emails. SecurityWeek has not seen any threat actor - ransomware group or other cybercrime actor - publicly claiming to have stolen Flickr data."

On February 5, 2026, a vulnerability in a system operated by one of Flickr's email service providers may have allowed unauthorized access to member information. Access to the affected system was shut down within hours. The impacted service provider has not been named. Potentially exposed fields include names, email addresses, usernames, account types, IP addresses, general location, and Flickr activity data. Passwords and payment card numbers were not affected. The notice indicates possible unauthorized access without confirming theft. Users are advised to be cautious of Flickr-themed phishing emails, and no threat actor has publicly claimed the data.

Read at SecurityWeek