Company
Date Published
Author
Nick McKenzie | Bugcrowd CIO and CSO
Word count
427
Language
English
Hacker News points
None

Summary

Bugcrowd has updated its blog post to address a recent security breach involving unauthorized access to Salesloft’s Drift application, which was integrated with Bugcrowd's Salesforce instance, affecting over 700 companies. The investigation found that the breach exposed some customer information, such as business contact details, billing addresses, and product pricing, but no attachments or sensitive files were compromised. Bugcrowd urges customers to rotate their testing or triage credentials as a precaution, even though they believe these credentials have likely been updated over time. In response to the incident, Bugcrowd has taken several measures, including conducting a thorough investigation, enhancing monitoring and security measures, disconnecting potentially vulnerable integrations, and strengthening internal defenses. The company emphasizes its commitment to safeguarding customer data and assures clients that they are actively working to address the situation, promising further updates as needed.