Adobe, which sells web marketing and measurement tools including Adobe Social, Site Catalyst and Adobe Marketing Cloud, said it had recently discovered “sophisticated attacks” on its network, including the illegal access of customer information as well as source codes to numerous Adobe products, including Adobe Acrobat, ColdFusion and ColdFusion Builder.

Writing on its blog, Adobe chief security officer Brad Arkin said the company’s investigation had indicated that customers’ IDs and encrypted passwords had been accessed.

He continued: “We also believe the attackers removed from our systems certain information relating to 2.9m Adobe customers, including customer names, encrypted credit or debit card numbers, expiration dates, and other information relating to customer orders.”

As a precaution Adobe has reset relevant customer passwords as well as notifying customers whose credit or debit card information was believed to be involved.

Arkin added: “We deeply regret that this incident occurred. We’re working diligently internally, as well as with external partners and law enforcement, to address the incident.”