Bitly, the URL-shortening service, has revealed on its blog a possible security breach, saying it has "reason to believe that Bitly account credentials have been compromised." The reason for the concern isn't addressed, however.
Fortunately, the company doesn't believe that any of the user accounts have actually been accessed by whomever caused the security issue, and the steps it has taken appear to be purely preventative at this point.
Twitter and Facebook accounts have been disconnected from the user accounts, with users having to reconnect them the next time they log in to the service. Beyond that, users also have to change their API key and OAuth token.
Not surprisingly, users are also being advised to change their passwords, as well. The company has posted instructions on how to perform each action on its blog, and has further stated, "We apologize for any inconvenience and we will continue to update our Twitter feed" when more updates are available.
SOURCE: Bitly Blog