Unprotected APIs Expose Data on More Than 33,000 Employees, CloudSEK Reports
Summary
CloudSEK’s BeVigil scanner found unauthenticated API endpoints at an unnamed technology service provider, exposing more than 33,000 employee records and internal asset and project information.
Key points
- BeVigil detected unauthenticated API endpoints associated with the provider’s internal web application.
- The endpoints exposed employee names, email addresses and business-unit details, as well as hardware, device and project information.
- CloudSEK says the APIs allowed access to more than 33,000 records without authentication.
- The article says the data was updated in real time, potentially revealing employee activity, infrastructure changes and software deployments.
- The exposure could enable targeted phishing or social engineering, according to the article.
- The article recommends adding API authentication and authorization, encrypting sensitive data, monitoring API traffic and rotating exposed credentials; it does not say these steps were completed.
Article Details
- Victim Organization
- Not disclosed
- Incident Type
- Exposure of employee data through unauthenticated API endpoints
- Data Types Exposed
- Employee names
- Email addresses
- Business unit details
- Hardware configurations
- Provisioned device details
- Workgroup assignments
- Project structures
- Affected Records
- Over 33,000 employee records
- Operational Impact
- The article reports that the exposed endpoints allowed unauthenticated access to confidential employee and organizational data. It does not report resulting operational disruption or confirmed follow-on attacks.
- Ransom Or Extortion
- Unknown
- Claim Status
- confirmed