DigitalOcean Data Leak Incident Exposed Some of Its Customers Data

guest · May 8, 2020

DigitalOcean Data Leak Incident Exposed Some of Its Customers Data
May 8, 2020
https://thehackernews.com/2020/05/digitalocean-data-breach.html

DigitalOcean, one of the biggest modern web hosting platforms, recently hit with a concerning data leak incident that exposed some of its customers' data to unknown and unauthorized third parties.

Though the hosting company has not yet publicly released a statement, it did has started warning affected customers of the scope of the breach via an email.
According to the breach notification email that affected customers [1, 2] received, the data leak happened due to negligence where DigitalOcean 'unintentionally' left an internal document accessible to the Internet without requiring any password.

"This document contained your email address and/or account name (the name you gave your account at sign-up) as well as some data about your account that may have included Droplet count, bandwidth usage, some support or sales communications notes, and the amount you paid during 2018," the company said in the warning email as shown below.
Click to expand...

Update — A spokesperson for the company confirmed The Hacker News of the incident and shared a statement:

"We had a document that was discovered to be shared publicly and while we feel confident there was no malicious access to that document, we informed our customers regardless for transparency. Less than 1% of our customer base was impacted, and the only PII included in the file was account name and email address.
Click to expand...

guest · Apr 28, 2021

DigitalOcean says customer billing data accessed in data breach
April 28, 2021
https://techcrunch.com/2021/04/28/digitalocean-customer-billing-data-breach/

DigitalOcean has emailed customers warning of a data breach involving customers’ billing data, TechCrunch has learned.

The cloud infrastructure giant told customers in an email on Wednesday, obtained by TechCrunch, that it has “confirmed an unauthorized exposure of details associated with the billing profile on your DigitalOcean account.” The company said the person “gained access to some of your billing account details through a flaw that has been fixed” over a two-week window between April 9 and April 22.
Click to expand...

The email said customer billing names and addresses were accessed, as well as the last four digits of the payment card, its expiry date and the name of the card-issuing bank. The company said that customers’ DigitalOcean accounts were “not accessed,” and passwords and account tokens were “not involved” in this breach.

“To be extra careful, we have implemented additional security monitoring on your account. We are expanding our security measures to reduce the likelihood of this kind of flaw occuring [sic] in the future,” the email said.
Click to expand...

Log in or Sign up

DigitalOcean Data Leak Incident Exposed Some of Its Customers Data

guest Guest

guest Guest

Log in or Sign up

DigitalOcean Data Leak Incident Exposed Some of Its Customers Data

guest Guest

guest Guest

Useful Searches