Job performance details about more than 900 employees of a major office-space provider have been published online by accident after a staff review.
Sales staff at Regus had been recorded showing researchers posing as clients around office space available to rent.
Information about the employees was later published on Trello, a task-management website, and a spreadsheet with names, address and job performance data was found via Google by the Telegraph newspaper.
Experts Comments
January 21, 2020
This exposure is yet another example of the fact that when you entrust your personal data to a company, you're also entrusting it to all the third-party providers and vendors that company contracts with. In this case, Applause's provider didn't seem to make much of an effort to secure anything. According to reports, there was no encryption, no access control, and no operational security used to keep these performance reviews out of the wrong hands.
Like(Submit Your Expert Comments
What do you think of the topic? Do you agree with expert(s) or share your expert opinion below.Be part of our growing Information Security Expert Community (1000+), please register here.
Linkedin Message
@Prash Somaiya, Technical Program Manager, provides expert commentary at @Information Security Buzz.
"Such a breach as this is so easily avoidable and like with many incidents, was simply caused by human error rather than anything malicious...."
#infosec #cybersecurity #isdots
https://informationsecuritybuzz.com/expert-comments/expert-on-breach-regus-sales-staff-data-exposed-after-huge-data-breach
Facebook Message
@Prash Somaiya, Technical Program Manager, provides expert commentary at @Information Security Buzz.
"Such a breach as this is so easily avoidable and like with many incidents, was simply caused by human error rather than anything malicious...."
#infosec #cybersecurity #isdots
https://informationsecuritybuzz.com/expert-comments/expert-on-breach-regus-sales-staff-data-exposed-after-huge-data-breach