TikTok has announced that it is taking steps to mitigate a cyberattack that is currently targeting many prominent users through direct messages in an attempt to take over their accounts.
“We have put steps in place to prevent this from happening in the future and are working directly with affected account holders to restore access where appropriate,” said Jason Gross, a spokesperson for TikTok’s privacy and security team.
Gross said TikTok is still investigating the attack and couldn’t comment on its scale or sophistication at this time, describing the threat as merely a “potential exploit.”
TikTok’s statement follows a report Tuesday that CNN’s account was briefly compromised last week. Semifour, citing anonymous sources at the news organization, reported that the intrusion “does not appear to be the result of anyone accessing it from CNN’s side.” CNN did not immediately respond to WIRED’s request for comment.
Hacking attempts targeting U.S. news organizations are of particular concern with the presidential election looming this fall.
Forbes reported the same day, citing company sources, that hotel heiress Paris Hilton’s account had also been affected. A TikTok representative told WIRED that Hilton’s account had been targeted but not compromised.
Security and privacy concerns surrounding TikTok go beyond cyberattacks by bad actors. The company itself is working to keep it available in the United States after President Joe Biden signed legislation in April that forced its parent company, China-based ByteDance, to sell TikTok or be banned. TikTok and several users are suing the U.S. government, arguing that the law is unconstitutional under the First Amendment.
This is a developing story, check back for updates.
