ownCloud Urges Users to Enable Multi-Factor Authentication Following Credential Theft

**ownCloud urges immediate MFA adoption after credential-theft incidents** — A Hudson Rock threat intelligence report found attackers used infostealer malware (e.g., RedLine, Lumma, Vidar) to harvest credentials from infected endpoints and then access self-hosted ownCloud instances that did not enforce multi-factor authentication; ownCloud confirms the platform itself was not exploited and attributes the incidents to misconfiguration and lack of enforced MFA, advising administrators to enable MFA, reset passwords, audit access logs, and invalidate sessions.