Massive Nitro data breach impacts Microsoft, Google, Apple, more

guest · Oct 26, 2020

Massive Nitro data breach impacts Microsoft, Google, Apple, more
October 26, 2020
https://www.bleepingcomputer.com/ne...a-breach-impacts-microsoft-google-apple-more/

A massive data breach suffered by the Nitro PDF service impacts many well-known organizations, including Google, Apple, Microsoft, Chase, and Citibank.

Claimed to be used by over 10 thousand business customers and 1.8 million licensed users, Nitro is an application used to create, edit, and sign PDFs and digital documents.
As part of their service offering, Nitro offers a cloud service used by customers to share documents with coworkers or other organizations involved in the document creation process.
Click to expand...

Nitro software suffers a data breach
On October 21st, Nitro Software issued an advisory to the Australia Stock Exchange, stating that they were affected by a "low impact security incident" but that no customer data was impacted.

Cybersecurity intelligence firm Cyble has told BleepingComputer that a threat actor is selling the user and document databases, as well as 1TB of documents, that they claim to have stolen from Nitro Software's cloud service.
This data is now being sold in a private auction with the starting price set at $80,000.
Click to expand...

If the threat actors stole the documents as they claim, this could be one of the worst corporate data breaches we have seen in a while.

As Nitro is commonly used by businesses to sign sensitive financial, legal, and marketing documents digitally, it could allow for the leaking of information that would significantly impact a company's business.
For those who are concerned that their Nitro account is part of this breach, Cyble has added the data to their AmIBreached.com service.
Click to expand...

guest · Oct 28, 2020

Nitro again insists data breach 'isolated' as incident gets more coverage
October 28, 2020
https://www.itwire.com/security/nit...-isolated-as-incident-gets-more-coverage.html

While Nitro described the breach as "an isolated security incident" in its first public statement to the ASX on 21 October, Bleeping Computer headlined its story "Massive Nitro data breach impacts Microsoft, Google, Apple, more", based on information it had received from the cyber security firm Cyble.

Nitro founder and chief executive Sam Chandler said in Wednesday's statement: "Several media articles published in the past 24 hours contain a number of factual inaccuracies regarding this incident.

"The relevant database does not contain copies of user or customer documents. Documents are stored in a separate database in a different location.
"There is currently no established evidence that this separate database has been compromised. We are providing updates on the incident on our security page."
Click to expand...

Parts of Wednesday's update from Nitro repeat some of the statements made in its first update, issued on Tuesday and sent to iTWire.

Bleeping Computer's Lawrence Abrams, who wrote the report, contested the accuracy of the Nitro statement, saying that though the company had claimed "the email domains in these logs do not constitute Nitro 'customers' or 'accounts", what he had seen was different.

"Unfortunately, this does not appear accurate as the user database seen by Bleeping Computer does contained a bcrypt hashed password column," Abrams wrote.
Click to expand...

A number of other smaller tech sites like TechRadar, The Daily Swig and Silicon Angle have reported the incident, all based on Bleeping Computer's account.
Click to expand...

guest · Nov 20, 2020

Thousands of New Zealanders' email addresses, passwords stolen in data breach
November 20, 2020
https://www.tvnz.co.nz/one-news/new...ail-addresses-passwords-stolen-in-data-breach

A person is claiming to be in possession of 2.6 million email addresses and encrypted passwords from Nitro PDF, of which 4000 are .nz email addresses, cyber security organisation CERT NZ said in an alert this afternoon.

"CERT NZ understands there has been further data released in this breach, the details are not yet confirmed," CERT NZ said.
"CERT NZ cannot verify the authenticity of this data."
Click to expand...

CERT NZ: Nitro PDF users’ email addresses and hashed passwords leaked

guest · Dec 10, 2020

Hackers sell 4000 .nz email addresses, passwords stolen from popular app
December 10, 2020
https://www.tvnz.co.nz/one-news/new...-email-addresses-passwords-stolen-popular-app

On November 20, a person claimed to be in possession of 2.6 million email addresses and hashed passwords from Nitro PDF, an application which allows users to create, edit and sign PDF files, cyber security organisation CERT NZ said in an alert this afternoon.
Of that figure, over 4000 were .nz email addresses.

CERT NZ today said it now understands there was a further breach, after attackers claimed to have put 11 terabytes of documents stored on the service for sale online.
Metadata for the documents have been shared publicly, strongly indicating the attackers have the documents in their possession, CERT NZ said.
Click to expand...

mood said: ↑

CERT NZ: Nitro PDF users’ email addresses and hashed passwords leaked
Click to expand...

Update: From initial reporting in late October, the attackers claimed to have PDF documents from Nitro PDF for sale. In late November, CERT NZ became aware the attackers had publicly shared the metadata of the documents, indicating that they had the PDF documents in their possession.

At this point CERT NZ has no reason to believe that the attackers intend to release these publicly. However CERT NZ is encouraging organisations to consider what the implications would be if the documents were released.
Click to expand...

Log in or Sign up

Massive Nitro data breach impacts Microsoft, Google, Apple, more

guest Guest

guest Guest

guest Guest

guest Guest

Log in or Sign up

Massive Nitro data breach impacts Microsoft, Google, Apple, more

guest Guest

guest Guest

guest Guest

guest Guest

Useful Searches