Web hosting provider Digital Ocean experienced a security lapse that exposed some of customer details.
An internal Digital Ocean document was mistakenly left accessible online.
Digital Ocean says the document contained several types of user account details.
This included personally identifiable information such as customer email addresses and their respective Digital Ocean usernames, but also account technical details such as the number of droplets (servers) owned by the customer, the user's bandwidth usage, support or sales communications notes, and the amount of money the customer paid during the calendar year 2018.
Digital Ocean said that the internal document was accessed at least 15 times while it was left available online.
Digital Ocean said the file contained details for less than 1% of the company's total customer base.
"id": "DIG032301222",
"linkid": "digitalocean",
"type": "Data Leak",
"date": "05/2020",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"