Company claimed that their server was not hacked but hacker gained access by exploiting some kind of vulnerability which could be SQL injection. Company didn’t confirm how many customers record were affected but confirmed that less than one per cent of leaked data is of SMB customers.
Hacked leaked about 250 records and threaten to leak more in coming days. hacker also demanded $15,000 from company for not leaking more data. Company has not yet paid the money to hacker.
DetoxRansome, hacker behind the attack claimed that they got access to two Bitdefender cloud servers. He confirmed that passwords were saved in plain text.
Company has already started the investigation to know how much data was affected and how the hack was performed. But this is really a bad news that a big security firm is storing customer’s password in plain text.
Source: Hackerfilm
Related Posts
