Atlassian

Atlassian reveals a data leak that was brought on by the theft of employee login information that was then utilized to obtain data from a third-party vendor.

More than 13,200 entries make up the employee file that was uploaded online, and a brief inspection of the file suggests that it contains data on many current employees, including names, email addresses, work departments, and other details.

The threat actors obtained information from a third-party vendor using the employee login credentials they had stolen.

The business emphasized that the event had no impact on consumer or network data.

The business acknowledged the data breach and disclosed that Envoy, a startup that offers workplace management services to the Australian software giant, was the source of the leaked data.

Source: https://securityaffairs.com/142424/data-breach/atlassian-data-leak.html

"id": "ATL195481023",
"linkid": "atlassian",
"type": "Data Leak",
"date": "02/2023",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"