Zello Urges Password Reset After Potential Security Incident

The service Zello has urged its users to change their account passwords due to a potential security threat. Zello, which boasts a user base of 140 million, is a mobile application offering push-to-talk communication. Its users include emergency service personnel, hospitality workers, transportation staff, as well as families and friends.

Since mid-November, many users have received notifications recommending they update passwords for accounts created before November 2, 2024. Users are also advised to update passwords for other online services if they are identical to their Zello credentials. The notification contains a link to a support page with detailed instructions on how to change passwords via the app.

A screenshot of the notification from Zello highlights the importance of updating passwords for accounts created prior to November 2, 2024, and advises users to update credentials for other services if they overlap.

Users who received the warning reported that Zello provided no further clarification. The company has also not responded to media inquiries.

It remains unclear whether the warning is related to a data breach or an attack leveraging previously stolen credentials. However, the suggestion of possible hacker access to user passwords has raised significant concerns. Indications suggest the incident affects only accounts created before November 2, possibly hinting at a security breach during that timeframe.

Zello has faced security incidents in the past. In 2020, cybercriminals stole users’ email addresses and hashed passwords, prompting a similar password reset. Zello users are strongly encouraged to exercise caution and update their credentials to mitigate potential risks.