**Flickr Experiences Data Breach: Blames Third-Party Email Service Provider**

Users of the legacy image-sharing website Flickr have been sent an email warning them about a data breach that occurred on February 5. According to the message, attackers may have accessed user locations and activity information.

The security incident is believed to have stemmed from a third-party email service provider, although the identity of this company has not been specified. In an effort to contain the damage, Flickr said it "shut down access to the affected system within hours of learning about it" and notified its email provider, demanding an investigation into the incident.

In the email to customers, Flickr stated that it had disabled access to the vulnerable endpoint and removed all links to the compromised area before contacting its email service provider. The company also claimed to be conducting a thorough review of its security practices with third-party providers and has notified relevant data protection authorities.

The data breach is reported to have exposed personally identifiable information (PII) and other sensitive markers, including names, email addresses, usernames, account types, IP addresses, general locations, and Flickr activity. However, the extent of the breach varies depending on each individual account, and it's unlikely that all users will be affected equally.

The Register reached out to SmugMug-owned Flickr for further information, including the number of users impacted by the data breach. Given that the company operates in 190 countries and has a significant presence in Europe, with approximately 228,000 active users in the region, it's possible that multiple regions were affected.

Flickr generates 800 million page views per month, with 35 million active users contributing to the site. The company's email warns users to be cautious of phishing attempts and reminds them that Flickr would never ask for sensitive information such as passwords via email. It also advises users to review their account settings for any unexpected changes and consider changing their password if they use it across multiple services.

Flickr has assured its users that no password or financial information was affected by the data breach, although this may not entirely alleviate concerns given the sensitive nature of the exposed data.

In a statement, Flickr expressed regret for the incident and the worry it may have caused. The company emphasized its commitment to protecting user data and promised to take immediate action to prevent similar issues in the future. This includes conducting a thorough investigation, strengthening system architecture, and enhancing monitoring of third-party service providers.