Flickr

Summary

Flickr notified users that a vulnerability in a system operated by an unnamed third-party email service provider may have allowed unauthorized access to some member information. The company said it shut down access to the affected system within hours of learning about the issue. Potentially exposed data included names, email addresses, usernames, account types, IP addresses, general location, and Flickr activity data. Flickr stated that passwords and payment card numbers were not affected, and its notification did not confirm that the information was actually accessed or stolen.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On February 5, 2026, Flickr was alerted to a vulnerability in a system operated by one of its email service providers. The company said the flaw may have allowed unauthorized access to some Flickr member information. Flickr did not name the impacted email service provider. The affected system was operated by that third party rather than described as a Flickr-operated platform. Flickr stated that it shut down access to the affected system within hours of learning about the vulnerability. The company’s notification indicated that certain user data may have been exposed, but it did not state that hackers actually accessed or stole the information. It also did not identify a ransomware group, cybercrime actor, or other threat actor connected to the incident.

The information potentially involved included names, email addresses, usernames, account types, IP addresses, general location, and Flickr activity data. Flickr said passwords were not affected by the incident. The company also said payment card numbers were not affected. Because the incident involved an email service provider and included email addresses and Flickr-related account information, Flickr urged users to be cautious of Flickr-themed phishing emails. SecurityWeek reported that it had not seen any public claim by a threat actor saying it had stolen Flickr data. The available information described the response as the shutdown of access to the affected system shortly after Flickr learned of the vulnerability. The incident was presented as a potential unauthorized-access event involving third-party email infrastructure, with personal account and activity-related information identified as potentially exposed.

Sources

Sources available to members: 1 source.