Will Fitbit be leaving cloudflare following the 8 month long data breach?

[SunriseRun1251]

I would like to use fitbit again, but will not do so until fitbit transfers away from cloudflare. If you aren't aware, cloudflare "leaked" 1.2 million accounts worth of data. What that means is that your account data may have been inadvertently given to another person somewhere in the world. It is completely unacceptable for cloudflare to have had this bug in the first place, but it is absolute laziness that it went on unnoticed for as long as it did, proving cloudflares security to be faulty at best. The even more unacceptable thing would be for fitbit to continue to utilize a company whose lax policies allowed a data breach that went unnoticed for 8 months. Does anyone know if there are any plans in the near future to move away from the cloudflare platform? 

[SteveH]

Fitbit's response to cloudflare is documented here: https://eng.fitbit.com/fitbit-response-to-cloudbleed/

[SunriseRun1251]

Hi Steve and thanks for chiming in here. However, the original question remains:

Does anyone know if there are any plans in the near future to move away from the cloudflare platform? 

Steve does not know. Anyone else?

[USAF-Larry]

@SunriseRun1251, I doubt if anyone here knows if there are plans to move from Cloudflare, nor would they know if there are plans to stay with it indefinitely.  Technology is always changing. If you choose to not use Fitbit because of it, that is your decision to make, and not ours. As they said in the article @SteveH referred you to, you need to contact support for additional information:

"We encourage any users that are concerned about this issue to reach out to our support teams. We’re working to ensure that we have the correct customer support resources on hand to quickly help anyone that feels they need help."

[SunriseRun1251]

Hi Larry and thanks for letting me know your opinion. I work in the same industry as cloudflare as an engineer and the one thing I can tell you is that technology might be changing, but that has nothing to do with this egregious security issue. This is completely unacceptable. Cloudflare implemented a bug into their own code that leaked 1.2 million accounts worth of data to other, random people throughout the world...for 8 months! 8 months, Larry. If fitbit stays with them, you and everyone else who values their personal data would be a fool for letting them maintain even your ip address. The question remains, will fitbit move away from the cloudflare platform. If you know the answer, great. If not, hey, why not chime in here like Larry and Steve and let us know. Thanks for taking the time!

[Colinm39]

I'm wondering now.  I have just received a sales email selling upmarket sunglasses. This type of invasion never happened before in my years with Fitbit. Fortunately it was through a dormant account.

[SteveH]

@SunriseRun1251 as customer support doesn't monitor this user community all we are going to get in this thread is speculation until someone contacts them and asks.

[Colinm39]

@SteveHI have sent a PM to Fitbit @EmersonFitbit because the PM I received as an email advertising sunglasses DID NOT come from the  dormant Community Account. It came direct from Fitbit Community [community@mail.fitbit.com]

The website had wwww.etc... change that to www...... and you get Ray-Ban official site..

Let's see what eventuates.....

[SteveH]

Hi Colin, I'm aware that there is an ongoing issue with SPAM PMs relating a RayBan at the moment and that Matthew has been addressing this.

[Colinm39]

@SteveHThanks for the reply but before I posted this I couldn't find anything on the Forums..