<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p dir="ltr"
style="line-height:1.15;margin-top:0pt;margin-bottom:0pt;"
id="docs-internal-guid-6f3d17dc-19e8-4114-4c3a-ba86c8a0844b"><span
style="font-size:15px;font-family:Arial;color:#000000;background-color:transparent;font-weight:normal;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;">One
of our developers discovered that, starting on about May 4th,
2014, for a period of around 3 months, during the migration of
our testing server for test builds of the Bugzilla software,
database dump files containing email addresses and encrypted
passwords of roughly 97,000 users of the test build were posted
on a publicly accessible server. As soon as we became aware,
the database dump files were removed from the server
immediately, and we’ve modified the testing process to not
require database dumps.</span></p>
<br>
<p dir="ltr"
style="line-height:1.15;margin-top:0pt;margin-bottom:0pt;"><span
style="font-size:15px;font-family:Arial;color:#000000;background-color:transparent;font-weight:normal;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;">Generally,
developers who use our test builds have told us they understand
that these builds are insecure and may break, so they do not use
passwords they would reuse elsewhere. However, because it is
possible that some users could have reused their passwords on
other websites or authentication systems, we’ve sent notices to
the users who were affected by this disclosure and recommended
that they change any similar passwords they may be using. It’s
important to note that, unless users reused the password they
used on landfill.bugzilla.org, this does not affect
bugzilla.mozilla.org email addresses or passwords. </span></p>
<br>
<p dir="ltr"
style="line-height:1.15;margin-top:0pt;margin-bottom:0pt;"><span
style="font-size:15px;font-family:Arial;color:#000000;background-color:transparent;font-weight:normal;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;">We
are deeply sorry for any inconvenience or concern this incident
may cause you. </span></p>
<br>
<p dir="ltr"
style="line-height:1.15;margin-top:0pt;margin-bottom:0pt;"><span
style="font-size:15px;font-family:Arial;color:#000000;background-color:transparent;font-weight:normal;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;">Thanks,</span></p>
<br>
<p dir="ltr"
style="line-height:1.15;margin-top:0pt;margin-bottom:0pt;"><span
style="font-size:15px;font-family:Arial;color:#000000;background-color:transparent;font-weight:normal;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;">Mark
Côté</span></p>
<p dir="ltr"
style="line-height:1.15;margin-top:0pt;margin-bottom:0pt;"><span
style="font-size:15px;font-family:Arial;color:#000000;background-color:transparent;font-weight:normal;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;">Assistant
Project Lead, Bugzilla</span></p>
</body>
</html>