Cloud hosting provider DigitalOcean emailed its customers after a flaw exposed customer’s billing information.
- A flaw allowed an unauthorised user to access some of the DigitalOcean customer’s billing account details between April 9, 2021, and April 22, 2021.
- The email states that billing names, billing addresses, the last four digits of the payment card, its expiry date and payment cards bank name were accessed.
- The flaw has been fixed, and the exposure impacted a small percentage of customers.
Cloud hosting provider DigitalOcean emailed its customers after a flaw exposed customer’s billing information.
An email sent to the affected customers states that a flaw allowed an unauthorised user to access some of the customer’s billing account details between April 9, 2021, and April 22, 2021.
“An unauthorised user gained access to some of your billing account details through a flaw that has been fixed. This exposure impacted a small percentage of our customers," reads the email sent to customers.
According to the email, the exposed information includes billing name, billing address, payment card expiration, last four digits of payment card and payment card’s bank name.
The company said that customer’s DigitalOcean accounts were "not accessed," and passwords and account tokens were "not involved" in this breach.
DigitalOcean reports that they have fixed the flaws, and the breach was disclosed to relevant data protection authorities. It is still not clear what the flaws were that put customer billing information at risk.
In a statement, Tyler Healy, VP Security at DigitalOcean, told TechCrunch that this flaw exposed only 1% of billing profiles.
“To be extra careful, we have implemented additional security monitoring on your account. We are expanding our security measures to reduce the likelihood of this kind of flaw occurring [sic] in the future," stated the email.
For the latest cyber threats and the latest hacking news please follow us on Facebook, Linkedin, and Twitter.
You may be interested in reading: How to Survive the COVID Time Cyber Security Threats?