DigitalOCean confirmed the data breach via an email to its customers confirming the exposure of billing details. The tech giant assured that the incident affected very few customers.
DigitalOcean Data Breach
Recently, TechCrunch has reported on a data breach affecting the cloud hosting provider DigitalOcean.
The news seemingly surfaced online after DigitalOcean sent emails to its customers informing them of the breach. One such customer has shared the email in a tweet.
Though, it seems the firm is still in the process of notifying its customers since many users complained about not getting any intimation from DigitalOcean.
As revealed, the firm suffered a security breach that it noticed on April 26, 2021. The attackers accessed the billing details of some customers by exploiting a bug between April 9 and 22, 2021.
Consequently, they could view users’ billing names, addresses, payment card expiration date, bank name, and last 4 digits of the cards.
What Next?
Upon detecting the breach, the firm worked quickly to fix the vulnerability that triggered this incident. Due to this, the firm assured they had stopped the attackers’ access to user data. As the email stated:
To be extra careful, we have implemented additional security monitoring on your account. We are expanding our security measures to reduce the likelihood of this kind of flaw occurring in the future.
While they haven’t disclosed the exact number of customers affected by the incident. Yet, TechCrunch, quoting DigitalOcean’s security chief Tyler Healy, reported that the breach affected less than 1% of their customers.
Additionally, the firm assured they have reported the matter to law enforcement authorities.
However, they haven’t specifically explained the nature of the bug and how they noticed and fixed it. Also, no other details are available at the time of writing this article.