Nasdaq

A major data leak at the Tech Data Corporation NASDAQ was discovered by the research team at vpnMentor.

The breach exposed access to 264GB of Tech Data’s client servers, invoices, SAP integrations, plain-text passwords.

This contained email and personal user data, as well as reseller contact and invoice information, payment and credit card data, internal security logs, unencrypted logins and passwords, and more.

This was a serious leak as far as we could see, so much so that all of the credentials needed to log in to customer accounts were available.

Source: https://www.vpnmentor.com/blog/report-tech-data-leak/

TPRM report: https://scoringcyber.rankiteo.com/company/nasdaq

"id": "nas31826323",
"linkid": "nasdaq",
"type": "Data Leak",
"date": "06/2019",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Technology',
                        'name': 'Tech Data Corporation',
                        'type': 'Corporation'}],
 'data_breach': {'type_of_data_compromised': ['Client servers',
                                              'Invoices',
                                              'SAP integrations',
                                              'Plain-text passwords',
                                              'Email and personal user data',
                                              'Reseller contact and invoice '
                                              'information',
                                              'Payment and credit card data',
                                              'Internal security logs',
                                              'Unencrypted logins and '
                                              'passwords']},
 'description': 'A major data leak at Tech Data Corporation exposed access to '
                '264GB of client servers, invoices, SAP integrations, '
                'plain-text passwords, email and personal user data, reseller '
                'contact and invoice information, payment and credit card '
                'data, internal security logs, unencrypted logins and '
                'passwords, and more.',
 'impact': {'data_compromised': ['Client servers',
                                 'Invoices',
                                 'SAP integrations',
                                 'Plain-text passwords',
                                 'Email and personal user data',
                                 'Reseller contact and invoice information',
                                 'Payment and credit card data',
                                 'Internal security logs',
                                 'Unencrypted logins and passwords']},
 'references': [{'source': 'vpnMentor'}],
 'title': 'Tech Data Corporation Data Leak',
 'type': 'Data Leak'}