Typeform Announces Breach After Hacker Grabs Backup File

guest · Jun 29, 2018

Typeform Announces Breach After Hacker Grabs Backup File
June 29, 2018
https://www.bleepingcomputer.com/ne...ounces-breach-after-hacker-grabs-backup-file/

Barcelona-based online survey and form building service Typeform announced a data breach today after an unknown attacker downloaded a backup file containing sensitive customer information.

The company said the incident happened after the attacker exploited a vulnerability, yet it did not reveal what vulnerability that was. Typeform did say they plugged the security hole.

According to a timeline of events, Typeform said its employees became aware of the breach on Wednesday, June 27, at 14:00 CET, and secured the affected server 30 minutes later.
The company made a formal announcement late Friday night (EU timezones), two days later.

UPDATE: Shortly after this article's publication one of Typeform's customers, payment provider Monzo, has revealed that data for about 20,000 users who filled surveys on its site had been exposed.
Click to expand...

Minimalist · Jul 3, 2018

Budget hotel chain, UK political party, Monzo Bank caught by Typeform breach

More entities affected by the data breach at web form and survey company Typeform have come forward, including budget hotel chain Travelodge and UK political party the Liberal Democrats.

The survey-as-a-service biz discovered on 27 June that an intruder had accessed files from a "partial backup" dated 3 May containing what it termed as "partial information".
Click to expand...

https://www.theregister.co.uk/2018/...olitical_party_caught_out_by_typeform_breach/

guest · Jul 4, 2018

Hands up if you didn't lose data in the Typeform breach
And keep your hands up if you knew the lost data was – eek! – unencrypted
July 4, 2018
https://www.theregister.co.uk/2018/07/04/typeform_breach_continued/

The list of organisations notifying customers that they're affected by the Typeform data breach continues to grow – and at least one victim has publicly claimed the breached backup data was unencrypted.

However, the folk at Ocean Protocol departed from the template to include this detail in their breach post: “TypeForm has confirmed that the data was stored in an unencrypted manner which means that the data is accessible.”
Because of the breadth of its breach, Ocean Protocol is offering credit monitoring to affected customers. The company also published this handy risk-assessment table about the types of data caught in the breach.

PostShift said only 230 of its customers were impacted, because only one public-facing survey was hosted on Typeform.
The Australian Republican Movement is also reviewing its use of Typeform.
Click to expand...

Log in or Sign up

Typeform Announces Breach After Hacker Grabs Backup File

guest Guest

Minimalist Registered Member

guest Guest

Log in or Sign up

Typeform Announces Breach After Hacker Grabs Backup File

guest Guest

Minimalist Registered Member

guest Guest

Useful Searches