The California Office of the Attorney General disclosed a data breach affecting Slack Technologies, Inc. in July 2019, though the incident itself occurred on March 20, 2015. The breach involved the potential compromise of user sign-in credentials, exposing sensitive account information. While the exact scale of the breach was not detailed, unauthorized access to login credentials poses risks such as unauthorized account takeovers, phishing attacks, or further exploitation of user data within the platform. Slack, a widely used enterprise communication tool, stores conversations, shared files, and integration data, making credential exposure particularly concerning for organizational security. Although no explicit evidence of data exfiltration or misuse was confirmed in the report, the breach underscores vulnerabilities in credential storage or protection mechanisms during that period. The delayed disclosure (2019 for a 2015 incident) also raises questions about incident response timelines and transparency. The primary impact revolved around user account security, with potential downstream effects on corporate communications, intellectual property, or confidential discussions hosted on the platform. However, no direct financial, reputational, or large-scale data leakage consequences were publicly documented beyond the credential compromise.
Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-148983
TPRM report: https://www.rankiteo.com/company/zatech-slack
"id": "zat1008091725",
"linkid": "zatech-slack",
"type": "Breach",
"date": "3/2015",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"{'affected_entities': [{'industry': 'Technology / Software',
'location': 'California, USA',
'name': 'Slack Technologies, Inc.',
'type': 'Corporation'}],
'data_breach': {'personally_identifiable_information': 'Potential (via '
'credentials)',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['sign-in credentials']},
'date_detected': '2015-03-20',
'date_publicly_disclosed': '2019-07-17',
'description': 'The California Office of the Attorney General reported a data '
'breach involving Slack Technologies, Inc. on July 17, 2019. '
'The breach occurred on March 20, 2015, and involved '
'potentially compromised sign-in credentials of various users.',
'impact': {'data_compromised': ['sign-in credentials'],
'identity_theft_risk': 'Potential'},
'references': [{'date_accessed': '2019-07-17',
'source': 'California Office of the Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': ['California Office of '
'the Attorney '
'General']},
'title': 'Slack Technologies, Inc. Data Breach (2015)',
'type': 'Data Breach'}