Retailer Orvis.com Leaked Hundreds of Internal Passwords on Pastebin

ronjor · Nov 11, 2019

Orvis, a Vermont-based retailer that specializes in high-end fly fishing equipment and other sporting goods, leaked hundreds of internal passwords on Pastebin.com for several weeks last month, exposing credentials the company used to manage everything from firewalls and routers to administrator accounts and database servers, KrebsOnSecurity has learned. Orvis says the exposure was inadvertent, and that many of the credentials were already expired.
Click to expand...

https://krebsonsecurity.com/2019/11...d-hundreds-of-internal-passwords-on-pastebin/

mirimir · Nov 11, 2019

“Pastebin and other similar repositories are constantly being monitored and any data put out there will be preserved no matter how brief the posting is,” Holden said. “In the current threat landscape, we see data exposures nearly as often as we see data breaches. These exposures vary in scope and impact, and this particular one is as bad as they come without specific data exposures.”
Click to expand...

Damn.

I use Pastebin too. Mainly to transfer information between VMs on different hosts, when there's really no workable alternative.

But nothing goes on Pastebin that's not gpg encrypted, and base64 encoded.

I can't imagine what people who upload plaintext are thinking.

Log in or Sign up

Retailer Orvis.com Leaked Hundreds of Internal Passwords on Pastebin

ronjor Global Moderator

mirimir Registered Member

Log in or Sign up

Retailer Orvis.com Leaked Hundreds of Internal Passwords on Pastebin

ronjor Global Moderator

mirimir Registered Member

Useful Searches