Monday, July 22, 2024

Pure Storage Data Breach Following Snowflake Hack: LDAP Usernames, Email Addresses Exposed

Pure Storage has confirmed that a third party temporarily gained unauthorized access to a Snowflake data analytics workspace.

This workspace contained telemetry information used by Pure Storage to provide proactive customer support services.

The exposed data includes company names, LDAP usernames, email addresses, and the Purity software release version number.

Incident Details

Following a thorough investigation, Pure Storage revealed that the compromised workspace did not contain sensitive information such as passwords for array access or any data stored on customer systems.

The company emphasized that such information is never communicated outside of the array and is not part of telemetry data.

Consequently, the telemetry information cannot be used to gain unauthorized access to customer systems.

Pure Storage swiftly blocked any further unauthorized access to the compromised workspace.

The company has also reported no evidence of unusual activity on other elements of its infrastructure.

Analyze any MaliciousURL, Files & Emails & Configuration With ANY RUN Start your Analysis

Pure Storage is actively monitoring its customers’ systems and has not detected any unusual activity targeting their Pure systems.

Customer Communication and Assurance

Pure Storage is in contact with affected customers, who have reported no unusual activity targeting their systems.

The company has engaged a leading cybersecurity firm to conduct a preliminary investigation, which has validated Pure Storage’s conclusions regarding the information in the compromised workspace.

Pure Storage remains committed to providing timely and transparent updates to its customers.

The company will continue to monitor the situation closely and, as necessary, use its communication channels to provide important updates.

While the breach has raised concerns, Pure Storage’s prompt response and ongoing monitoring efforts have helped mitigate potential risks.

The company reassures its customers of its dedication to maintaining the security and integrity of its systems.

Looking for Full Data Breach Protection? Try Cynet's All-in-One Cybersecurity Platform for MSPs: Try Free Demo


Latest articles

SonicOS IPSec VPN Vulnerability Let Attackers Cause Dos Condition

SonicWall has disclosed a critical heap-based buffer overflow vulnerability in its SonicOS IPSec VPN....

Hackers Registered 500k+ Domains Using Algorithms For Extensive Cyber Attack

Hackers often register new domains for phishing attacks, spreading malware, and other deceitful activities. Such...

Hackers Claim Breach of Daikin: 40 GB of Confidential Data Exposed

Daikin, the world's largest air conditioner manufacturer, has become the latest target of the...

Emojis Are To Express Emotions, But CyberCriminals For Attacks

There are 3,664 emojis that can be used to express emotions, ideas, or objects...

Beware Of Fake Browser Updates That Installs Malicious BOINC Infrastructre

SocGholish malware, also known as FakeUpdates, has exhibited new behavior since July 4th, 2024,...

Data Breach Increases by Over 1,000% Annually

The Identity Theft Resource Center® (ITRC), a nationally recognized nonprofit organization established to support...

UK Police Arrested 17-year-old Boy Responsible for MGM Resorts Hack

UK police have arrested a 17-year-old boy from Walsall in connection with a notorious...
Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Free Webinar

Low Rate DDoS Attack

9 of 10 sites on the AppTrana network have faced a DDoS attack in the last 30 days.
Some DDoS attacks could readily be blocked by rate-limiting, IP reputation checks and other basic mitigation methods.
More than 50% of the DDoS attacks are employing botnets to send slow DDoS attacks where millions of IPs are being employed to send one or two requests per minute..
Key takeaways include:

  • The mechanics of a low-DDoS attack
  • Fundamentals of behavioural AI and rate-limiting
  • Surgical mitigation actions to minimize false positives
  • Role of managed services in DDoS monitoring

Related Articles