32 Million Sensitive Records Exposed From Service Management Provider

A significant data breach occurred at ServiceBridge, a technology company specializing in field service management. An unsecured database housing a substantial volume of sensitive business information was exposed to the public. 

The compromised database contained 31.5 million records, including contracts, work orders, invoices, proposals, and other critical documents from companies operating globally.

This poses a significant risk to the confidentiality and integrity of sensitive business data and could potentially lead to unauthorized access, data theft, and financial loss.

It involves a non-password-protected database containing over 31 million files totaling 2.68 TB.

The exposed documents, primarily in PDF and HTML formats, were organized chronologically from 2012 onward and belonged to various companies across different industries. 

These sensitive documents, including contracts, work orders, invoices, and more, posed a substantial risk to business security and individual privacy.

Are You From SOC/DFIR Teams? - Try Advanced Malware and Phishing Analysis With ANY.RUN -14-day free trial

The widespread exposure of such confidential data has serious implications for affected organizations and individuals.

The researcher discovered a publicly accessible database containing millions of documents from ServiceBridge, a field service management software. 

However, the extent of exposure and potential unauthorized access remain unknown due to ServiceBridge’s lack of response.

An internal forensic audit is necessary to determine the timeline of the exposure, identify any suspicious activity, and assess ServiceBridge’s role and potential third-party involvement. 

The ServiceBridge platform is a versatile software solution designed to support a wide range of service-based industries. It caters to businesses from various sectors, including commercial and industrial services, pest and animal control, cleaning, landscaping, construction, and more. 

The platform’s adaptability is evident in its customer base, encompassing a wide spectrum of entities, from individual homeowners and schools to prominent chain restaurants, Las Vegas casinos, and medical providers. 

The exposed documents contained sensitive personal information (PII), including names, addresses, contact details, and partial credit card data.

Protected health information (PHI), such as patient consent forms and medical equipment agreements, was also disclosed. 

Site audit reports revealed images of properties and businesses potentially compromising physical security. The incident predominantly originated in the United States but also involved entities and individuals from Canada, the United Kingdom, and various European countries.

Invoice fraud, a prevalent issue in B2C and B2B transactions, exploits exposed business documents to deceive victims using insider knowledge. This results in significant financial losses, estimated to average $300,000 per year for US businesses. 

Despite its widespread impact, many businesses remain unaware of its severity. While larger companies have resources to recover, small to medium-sized businesses and franchises are particularly vulnerable. 

Proactive measures, such as educating accounts payable teams, verifying vendor information, and exercising caution when processing unfamiliar invoices, are essential to mitigate risks.

Researchers at Website Plantet highlight a potential security risk in cloud storage applications where unencrypted documents can be exposed due to misconfiguration.

By accessing the database, attackers could potentially obtain sensitive information. 

Protect Your Business with Cynet Managed All-in-One Cybersecurity Platform – Try Free Trial