3D printing aficionados be wary, as popular 3D printing services firm Shapeways, Inc. has just suffered a data breach. Customers are now receiving notices from the company, letting them know what information is and is not at risk.

The exact time and means of the breach has not yet been disclosed, but Shapways is reporting “an incident involving unauthorized access to [its] systems.” According to the breach notification, the intruders gained access to some user names, email addresses, and shipping addresses, which could be sold or potentially misused.

While passwords may be put at risk, the Shapeways website protects them with a hash to prevent misuse. However, the notice still suggests resetting passwords as quickly as possible, and if the password is re-used on any other websites, to change those as well. Many users log in through Shapeways through their Google accounts, which are most likely untouched, but wary users may want to change their passwords there as well, to be safe.

Although many users have uploaded 3D model files to the Shapeways website, that information was not accessed by the hackers. Additionally, as the website does not store credit card information, users’ financial data is also secure.

Shapeways assures users that it is “actively coordinating with law enforcement and reviewing and reinforcing [its] security procedures.” Anyone worried that someone is attempting to misuse their personal information can also contact them for assistance.

Seeing as I have a Shapeways account myself – and have thusly received the data breach notification – I’m now off to change my passwords as well. A quick check on haveibeenpwned.com shows that the email I use for Shapeways hasn’t been compromised yet (and even then, it’s a junk email account I keep as a spare for just this sort of thing), but it’s better to be safe than sorry.

photo credit: Hacker – Hacking – Lupe von Nullen und Einsen – Password – LUPE – blau via photopin (license)