U.S. business consulting firm Frost & Sullivan suffered a data breach incident after data from an unsecured backup folder exposed on the Internet was sold on a hacker forum.
KelvinSecurity Team posted to a hacker forum the data including 6,000 customer records and 6,146 records for ts employees.
The customer database contained information such as the client name, email address, the company contact, whether they are confidential, and other non-sensitive data.
On the other hand, the exposed employee database had more sensitive information such as first and last names, login names, email addresses, and hashed passwords.
"id": "FRO22321222",
"linkid": "frostandsullivan",
"type": "Data Leak",
"date": "06/2020",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"