ownCloud Warns Users to Enable MFA After Credential Theft Incident

ownCloud warned users after Hudson Rock reported credential-theft incidents in January 2026 where infostealer malware (RedLine, Lumma, Vidar) stole credentials from infected employee devices and allowed unauthorized access to ownCloud accounts that did not have Multi-Factor Authentication enabled; ownCloud stressed this was not a platform zero-day and urged immediate MFA activation, password resets, session invalidation, and access-log reviews while recommending enterprises consider managed solutions with enforced MFA.