Flickr cybersecurity incidents and threat signals

Feb 5, 2026Ransomware

Medium

Flickr Security Incident Tied to Third-Party Email System

Photo-sharing community platform Flickr is notifying users of a data security incident that exposed their personal information. The popular online platform for image and video hosting, sharing, and management is telling users that the incident involves a third-party email service provider. “On February 5, 2026, we were alerted to a vulnerability in a system operated by one of our email service providers,” Flickr said . “This flaw may have allowed unauthorized access to some Flickr member information. We shut down access to the affected system within hours of learning about it.” The impacted service provider has not been named. Exposed information includes names, email addresses, usernames, account types, IP addresses, general location, and Flickr activity data.  The company pointed out that passwords and payment card numbers were not affected. Advertisement. Scroll to continue reading. Flickr’s notification states that certain user data may have been exposed, but it does not indicate that hackers actually accessed or stole the information; it only notes that unauthorized access could have occurred. Nevertheless, the company urged users to be cautious of Flickr-themed phishing emails. SecurityWeek has not seen any threat actor — ransomware group or other cybercrime actor — publicly claiming to have stolen Flickr data. Related : Substack Discloses Security Incident After Hacker Leaks Data Related : Hackers Leak 5.1 Million Panera Bread Records Related : Crunchbase Confirms Data Breach After Hacking Claims Written By Eduard Kovacs Eduard Kovacs (@EduardKovacs) is senior managing editor at SecurityWeek. He worked as a high school IT teacher before starting a career in journalism in 2011. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering. Meta Paid $78,000 Bounty for Vulnerability Exposing Customer Support Data Exploitation of ServiceNow Vulnerability Seen Days After Disclosure SonicWall Zero-Days Exploited to Deliver Custom Malware for Weeks Before Patch New Index Tracks Material Breaches — And Refuses to Add Up the Losses WP2Shell WordPress Vulnerabilities Exploited in the Wild Two Scattered Spider Hackers Sentenced to Jail in UK ‘ClickLock Stealer’ Bypasses macOS Security With Social Engineering, Process Killing China’s Top Cybersecurity Firms Hit by Mounting Military Procurement Bans Endpoint Security Firm Glow Launches With $180M in Funding at $1.2B Valuation Oracle Patches Over 1,400 Vulnerabilities With Quarterly Security Updates Ransomware Group Threatening to Leak Data Stolen From Coca-Cola’s Fairlife OpenAI Says Its AI Models Broke Loose and Hacked Hugging Face Trump Orders Defense Contractors to Map Software, Suppliers Across Critical Supply Chains Cisco Launches Low-Cost AI Models for Source Code Security Empirical Security Raises $25 Million in Series A Funding SecurityWeek Launches Critical Impact Awards to Recognize Excellence in Industrial Cybersecurity Join this live webinar as we explore why exploitation is outpacing remediation, where risk is growing fastest, and what security leaders can do to close the gap before attackers take advantage. CodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps! Jazz has named Sean Robinson, Rickie Goyal, Danielle Guetta, Shani Nago, and Lior Magram as VPs and Michael Calev as COO.