Unverified Listing Claims CARMA Data From 3,500+ Organizations Is for Sale
Summary
A seller identified as 2019 allegedly offered CARMA contact and client-configuration data said to cover more than 3,500 organizations. The claim is unverified; CARMA has not publicly commented.
Key points
- A listing allegedly offers data attributed to CARMA, with seller 2019 named in the report.
- The listing claims the records cover more than 3,500 organizations worldwide.
- Reported data includes names, email addresses, phone numbers and street addresses.
- Client configurations may reveal projects, industries, subscription status, internal comments and possible API tokens.
- The claim is unverified, and CARMA has not publicly addressed it.
Article Details
- Victim Organization
- CARMA
- Incident Type
- Alleged exposure and sale of client contact and configuration data
- Data Types Exposed
- Names
- Email addresses
- Phone numbers
- Street addresses
- Client configuration records, including projects, industries, and subscription status
- Internal comments
- Possible API tokens
- Affected Records
- Configurations reportedly associated with more than 3,500 organisations; exact record count not disclosed.
- Operational Impact
- No operational impact reported.
- Ransom Or Extortion
- An alleged seller reportedly offered the data for sale on a crypto market; no ransom demand or extortion was reported.
- Claim Status
- alleged