Sunday, February 9, 2025
Homecyber securityPure Storage Data Breach Following Snowflake Hack: LDAP Usernames, Email Addresses Exposed

Pure Storage Data Breach Following Snowflake Hack: LDAP Usernames, Email Addresses Exposed

Published on

SIEM as a Service

Follow Us on Google News

Pure Storage has confirmed that a third party temporarily gained unauthorized access to a Snowflake data analytics workspace.

This workspace contained telemetry information used by Pure Storage to provide proactive customer support services.

The exposed data includes company names, LDAP usernames, email addresses, and the Purity software release version number.

Incident Details

Following a thorough investigation, Pure Storage revealed that the compromised workspace did not contain sensitive information such as passwords for array access or any data stored on customer systems.

The company emphasized that such information is never communicated outside of the array and is not part of telemetry data.

Consequently, the telemetry information cannot be used to gain unauthorized access to customer systems.

Pure Storage swiftly blocked any further unauthorized access to the compromised workspace.

The company has also reported no evidence of unusual activity on other elements of its infrastructure.

Analyze any MaliciousURL, Files & Emails & Configuration With ANY RUN Start your Analysis

Pure Storage is actively monitoring its customers’ systems and has not detected any unusual activity targeting their Pure systems.

Customer Communication and Assurance

Pure Storage is in contact with affected customers, who have reported no unusual activity targeting their systems.

The company has engaged a leading cybersecurity firm to conduct a preliminary investigation, which has validated Pure Storage’s conclusions regarding the information in the compromised workspace.

Pure Storage remains committed to providing timely and transparent updates to its customers.

The company will continue to monitor the situation closely and, as necessary, use its communication channels to provide important updates.

While the breach has raised concerns, Pure Storage’s prompt response and ongoing monitoring efforts have helped mitigate potential risks.

The company reassures its customers of its dedication to maintaining the security and integrity of its systems.

Looking for Full Data Breach Protection? Try Cynet's All-in-One Cybersecurity Platform for MSPs: Try Free Demo

Divya
Divya
Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Latest articles

UK Pressures Apple to Create Global Backdoor To Spy on Encrypted iCloud Access

United Kingdom has reportedly ordered Apple to create a backdoor allowing access to all...

Autonomous LLMs Reshaping Pen Testing: Real-World AD Breaches and the Future of Cybersecurity

Large Language Models (LLMs) are transforming penetration testing (pen testing), leveraging their advanced reasoning...

Securing GAI-Driven Semantic Communications: A Novel Defense Against Backdoor Attacks

Semantic communication systems, powered by Generative AI (GAI), are transforming the way information is...

Cybercriminals Target IIS Servers to Spread BadIIS Malware

A recent wave of cyberattacks has revealed the exploitation of Microsoft Internet Information Services...

Supply Chain Attack Prevention

Free Webinar - Supply Chain Attack Prevention

Recent attacks like Polyfill[.]io show how compromised third-party components become backdoors for hackers. PCI DSS 4.0’s Requirement 6.4.3 mandates stricter browser script controls, while Requirement 12.8 focuses on securing third-party providers.

Join Vivekanand Gopalan (VP of Products – Indusface) and Phani Deepak Akella (VP of Marketing – Indusface) as they break down these compliance requirements and share strategies to protect your applications from supply chain attacks.

Discussion points

Meeting PCI DSS 4.0 mandates.
Blocking malicious components and unauthorized JavaScript execution.
PIdentifying attack surfaces from third-party dependencies.
Preventing man-in-the-browser attacks with proactive monitoring.

More like this

UK Pressures Apple to Create Global Backdoor To Spy on Encrypted iCloud Access

United Kingdom has reportedly ordered Apple to create a backdoor allowing access to all...

Autonomous LLMs Reshaping Pen Testing: Real-World AD Breaches and the Future of Cybersecurity

Large Language Models (LLMs) are transforming penetration testing (pen testing), leveraging their advanced reasoning...

Securing GAI-Driven Semantic Communications: A Novel Defense Against Backdoor Attacks

Semantic communication systems, powered by Generative AI (GAI), are transforming the way information is...