The Joomla open-source content management system (CMS) announced a security breach.
The incident took place after a member of the Joomla Resources Directory (JRD) team left a full backup of the JRD site (resources.joomla.org) on an Amazon Web Services S3 bucket owned by their own company.
The backup file was not encrypted and contained details for roughly 2,700 users who registered and created profiles on the JRD website.
Data that had been exposed included Full name, Business address, Business email address, Business, phone number, Company URL, Nature of business, Encrypted password (hashed), IP address, and Newsletter subscription preferences.
The severity of this breach is considered low, as most of this information was already public, as the JRD portal serves as a directory for Joomla professionals.
Source: https://www.zdnet.com/article/joomla-team-discloses-data-breach/
"id": "JOO2226123",
"linkid": "joomla",
"type": "Data Leak",
"date": "06/2020",
"severity": "25",
"impact": "2",
"explanation": "Attack limited on finance or reputation"
Join the conversation