Neho

A recent credential leak from Neho, a real estate company with headquarters in Switzerland, may have given threat actors access to private information about the firm and its customers.

Threat actors might infiltrate the business' internal networks and commandeer official communication channels using exposed data.

Real estate companies manage sensitive information, such as bank account information, personally identifying information about clients, and other information that cybercriminals greatly value.

The Neho.ch website had a setup error that the Cybernews research team found, possibly exposing private information to the public and giving threat actors access to the company's infrastructure.

Source: https://securityaffairs.com/146879/data-breach/neho-data-exposed.html

TPRM report: https://scoringcyber.rankiteo.com/company/neho-ch

"id": "neh5224923",
"linkid": "neho-ch",
"type": "Data Leak",
"date": "05/2023",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Real Estate',
                        'location': 'Switzerland',
                        'name': 'Neho',
                        'type': 'Real Estate Company'}],
 'attack_vector': 'Website Setup Error',
 'data_breach': {'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Bank Account Information',
                                              'Personally Identifying '
                                              'Information',
                                              'Other Sensitive Information']},
 'description': 'A recent credential leak from Neho, a real estate company '
                'with headquarters in Switzerland, may have given threat '
                'actors access to private information about the firm and its '
                "customers. Threat actors might infiltrate the business' "
                'internal networks and commandeer official communication '
                'channels using exposed data. Real estate companies manage '
                'sensitive information, such as bank account information, '
                'personally identifying information about clients, and other '
                'information that cybercriminals greatly value. The Neho.ch '
                'website had a setup error that the Cybernews research team '
                'found, possibly exposing private information to the public '
                "and giving threat actors access to the company's "
                'infrastructure.',
 'impact': {'data_compromised': ['Bank Account Information',
                                 'Personally Identifying Information',
                                 'Other Sensitive Information']},
 'initial_access_broker': {'entry_point': 'Website Setup Error'},
 'motivation': 'Access to Sensitive Information',
 'post_incident_analysis': {'root_causes': 'Website Setup Error'},
 'references': [{'source': 'Cybernews research team'}],
 'title': 'Credential Leak at Neho Real Estate Company',
 'type': 'Credential Leak',
 'vulnerability_exploited': 'Website Setup Error'}