UK Software Company Reincubate Suffered a Data Breach

guest · Nov 2, 2020

Security incident, October 2020
October 28, 2020
https://reincubate.com/blog/security-incident-oct-2020/

I'm writing today about a security incident that may have exposed data from users' Reincubate accounts.

These are the accounts automatically created on our site as users purchased iPhone Backup Extractor or other products. They do not include data from devices or backups, or credit card data.
The data comes from a backup we created in November 2017.

The data may include names and email addresses, and — for some users — billing addresses and metadata on usage of our products and services. We have emailed all potentially affected users directly to explain which category they fall into. For the majority, this is limited to name and email address.
Click to expand...

What happened
Close to midnight on Sunday, 18 October 2020, we received an anonymous email from an individual claiming that data had been accessed from the Reincubate site through a vulnerability, requesting payment in Bitcoin to head off the information from being published.

We identified the cause of the breach as a set of AWS credentials which had been leaked in a separate incident at Datadog, a cloud monitoring service we used. We revoked these credentials at the time, but the process we used to revoke them failed, and we failed to double-check that the change had been made successfully. We no longer use Datadog, and the staff member in this role left the business shortly after that incident.
Click to expand...

guest · Nov 2, 2020

Data has been added to Have I Been Pwned:

Reincubate – 616,146 breached accounts

Reincubate
In October 2020, the app data company Reincubate suffered a data breach which exposed a backup from November 2017 (the newest record in the data appeared several months earlier). The data included over 616k unique email addresses, names and passwords stored as PBKDF2 hashes.

Breach date: 11 May 2017
Date added to HIBP: 29 October 2020
Compromised accounts: 616,146
Compromised data: Email addresses, Names, Passwords
Permalink
Click to expand...

Log in or Sign up

UK Software Company Reincubate Suffered a Data Breach

guest Guest

guest Guest

Log in or Sign up

UK Software Company Reincubate Suffered a Data Breach

guest Guest

guest Guest

Useful Searches