Zello, the push-to-talk service, is telling customers to reset their passwords in what appears to be another breach of the company.
According to BleepingComputer, Zello has sent a notification to users telling them they need to reset their passwords if they created their account prior to November 2nd, 2024. The notification doesn’t give any additional detail, other than to say the user should change their password on any online service on which they use the same password as on Zello.
Below is a copy of the notification users are receiving:
“Zello Security Notice – As a precaution, we are asking that you reset your Zelle app password for any account created before November 2nd, 2024,” reads the warning.
“We also recommend that you change your passwords for any other online services where you may have used the same password.”
While the company is not explicitly saying their systems were breached, but the fact that Zello is recommending users change their password on any service using the same password is a good indication that’s exactly what happened, or this is a case of credential stuffing at the least.
As BleepingComputer highlights, Zello suffered a previous data breach in 2020, so a breach of the company’s systems would not be unheard of.