Orvis exposed the passwords the business used to control everything from firewalls and routers to administrator accounts and database servers when it disclosed 100 corporate passwords on Pastebin.com.
Many of the credentials were already expired, according to Orvis, who claims that the exposure was an accident.
Since the file contains outdated credentials, many of the devices connected to it have been decommissioned, and the company has taken action to deal with the remaining ones.
For instance, Orvis' Pastebin files contained plaintext login credentials for practically every online service and security product the organisation has ever utilised.
"id": "ORV9830423",
"linkid": "orvis",
"type": "Data Leak",
"date": "11/2019",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"