CircleCI Customer Data Exposed Through Third-Party Vendor

guest · Sep 5, 2019

CircleCI Customer Data Exposed Through Third-Party Vendor
September 5, 2019
https://www.securityweek.com/circleci-customer-data-exposed-through-third-party-vendor

The DevOps firm said it became aware on August 31 that an attacker had gained access to some user data in its vendor account. An investigation is ongoing, but so far it appears that the incident impacts customers who accessed the CircleCI platform between June 30, 2019, and August 31, 2019.

“On August 31st at 2:32 p.m. UTC, a CircleCI team member saw an email notification from one of our third-party analytics vendors and suspected that unusual activity was taking place in this particular vendor account. [...]"
The exposed data includes usernames and email addresses associated with Bitbucket and GitHub, user IP addresses, and user agent strings. Organization names, repository names and URLs, branch names, and repo owners may have also been exposed, CircleCI said.

CircleCI’s website says the company runs over 30 million builds every month on Linux, Windows and macOS. It claims to have thousands of customers, including Samsung, Ford, Facebook, GoPro, Kickstarter, Lyft, and Spotify. The company has raised over $115 million to date.
Click to expand...

Log in or Sign up

CircleCI Customer Data Exposed Through Third-Party Vendor

guest Guest

Log in or Sign up

CircleCI Customer Data Exposed Through Third-Party Vendor

guest Guest

Useful Searches