A massive data breach suffered by the Nitro PDF service impacts many well-known organizations, including Google, Apple, Microsoft, Chase, and Citibank.
The Australia Stock Exchange received a notice from Nitro Software informing them of a low impact security incident, however no client data was touched.
The user and document databases, together with 1TB of documents, that a threat actor claimed to have stolen from Nitro Software's cloud service were discovered to be for sale.
Among the 70 million user entries in the database are email addresses, full names, passwords that have been bcrypt hashed, titles, company names, IP addresses, and other system-related information.
"id": "NIT51321523",
"linkid": "go-nitro",
"type": "Breach",
"date": "10/2020",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"