PHP Vulnerability Responses by Company

Reddit, Inc.

Companies / web services
Aliases / services
Reddit / レディット / Reddit, Inc.
Official website
https://www.reddit.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Reddit internal and advertiser information

Response status
Not listed
Response information checked
2026-10-30

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-30

Employee phishing on February 5, 2023 exposed internal documents and code, limited employee/business contacts and advertiser data. Reddit reported no evidence of access to ordinary users’ non-public data.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Enable two-factor authentication and use a strong unique password. The official post also recommends password managers to help identify phishing sites with mismatched domains.

Official service URL

Source URLs

  1. Official operator evidencehttps://redditinc.com/policies/user-agreementService and operation documentation
  2. 2023-02-09 official noticehttps://www.reddit.com/r/reddit/comments/10y427y/we_had_a_security_incident_heres_what_we_know/Service and operation documentation
Related official sources
  1. Official operator evidenceOfficial information directoryIdentifies Reddit, Inc. and the relevant scope.
  2. 2023-02-09 official noticeOfficial notice; link to this PHP incident unconfirmedConfirms incident scope and guidance for affected people.

Comments