1
«To simplify our structure and support long-term improvements to Harvest, Iridesco LLC—the company that previously provided your service—has been merged into its parent entity, Bending Spoons US Inc. Our Terms of Service and Privacy Policy have been revised to reflect that your service is now being provided by Bending Spoons US Inc. and to make a few other minor updates. No action is required on your part. Everything about your account will remain the same—including how your personal data is processed. These new Terms go into effect on January 1, 2026. By continuing to use our service, you agree to the new Terms of Service and acknowledge the updated Privacy Policy.»
Enshittification incoming …
Hi there,
We wanted to proactively reach out to you about a bug in our login system that we identified on Friday and resolved over the weekend.
This bug affected 0.00599% of Buffer users (467 out of 7,800,000), and we have reached out to those 467 people separately.
When a user logs in, we create an access token that secures their login and gives them access to Buffer. We identified a bug with this login system that made it possible in very rare cases for two accounts to share one access token. This would cause one of those Buffer users to log in to the incorrect account.
This issue is fully resolved. Our team has implemented a more secure system for granting these tokens, which ensures that all account access is private, safe, and secure.
To be especially clear: No passwords were compromised. No credit card details were at risk. This was a technical bug within our system and not a malicious event or hack from an outside party.
We’ve taken precautions to upgrade all Buffer accounts to our new login system. If you use a Buffer mobile app, you will need to log back in; if you use a third party app (like Zapier), you will need to reconnect.
Lastly, I’d like to send a big thank you to the customer who made us aware of this. We’re always amazed by the community we get to serve.
Photo of Dan. Dan Farrelly, CTO