The team behind the Joomla CMS discloses a data breach

guest · Jun 1, 2020

The team behind the Joomla CMS discloses a data breach
June 1, 2020
https://securityaffairs.co/wordpress/104118/data-breach/joomla-data-breach.html

Last week a member of the Joomla Resources Directory (JRD) team left an unencrypted full backup of the JRD site (resources.joomla.org) on an unsecured Amazon Web Services S3 bucket operated by the company.

The company did not reveal is third-parties have found and accessed to the S3 bucket.

“JRD full site backups (unencrypted) were stored in a third-party company Amazon Web Services S3 bucket. The third-party company is owned by a former Team Leader, still Member of the JRD team at the time of the breach.” reads the data breach notification.
The backup contained details for approximatively 2,700 users who registered and created profiles on the JRD website.
Click to expand...

Joomla team is investigating the data leak said they are still investigating the incident. It is currently unclear if anyone found and download the data from the third-party company’s S3 server.
The Joomla team also carried out a full security audit of the portal.

“The audit also highlighted the presence of Super User accounts owned by individuals outside Open Source Matters,” continues the notification.
Click to expand...

JRD Security Incident Notification

Even if we don’t have any evidence about data access, we highly recommend people who have an account on the Joomla Resources Directory and use the same password (or combination of email address and password) on other services to immediately change their password for security reasons.
Overall Risk Classification
Overall risk to data subjects as a result of this data breach: the team determined that the risk to data subjects is low to medium.
Click to expand...

Log in or Sign up

The team behind the Joomla CMS discloses a data breach

guest Guest

Log in or Sign up

The team behind the Joomla CMS discloses a data breach

guest Guest

Useful Searches