Online reputation defender faced with defending its own rep, after breach

Reputation.com sent emails to customers explaining that an undisclosed number of users have had their personal information accessed. There was no breach of financial information, or the negative information about customers that prompted those customers to seek the company’s services in the first place.

Accessed data includes names, email and physical addresses, and in some instance, phone numbers, dates of birth and job information of clients.

Encrypted user passwords belonging to a “small minority” of customers were compromised

“A list of highly encrypted (‘salted' and ‘hashed') user passwords for a small minority of users was accessed,” said the email. “Although it was highly unlikely that these passwords could ever be decrypted, we immediately changed the password of every user to prevent any possible unauthorized account access.”

In the email, the company said it “swiftly shut down” the attack on its network, once it was discovered.

Sophos reports the notification emails were sent on 4/30/13.