In many cases we find data breaches online that affect organizations and users. A very common problem that puts privacy at risk and can damage computer security. Now, when this happens to very important companies or services, which have many users, the problem is even worse. This is what has happened with a data leak that has affected Microsoft, Google or Apple , among other important organizations.
Google, Microsoft and Apple victims of a data breach
It is a massive leak suffered by the Nitro PDF service that has affected many organizations such as Google, Microsoft or Apple. As we know, it is an application used to create, edit or sign PDF files and digital documents. It is widely used by both private users and commercial clients.
Nitro currently offers a cloud service for sharing documents between co-workers and organizations. Something that is very common today, since the cloud has gained significant weight.
What has happened is that the Nitro software has suffered a data breach. There was a security incident on October 21, as confirmed by the company itself.
Now, a group of Cyble security researchers have reported that they are selling user and document databases (more than 1 TB) that they claim have stolen from the Nitro cloud.
As indicated from Cyble, the database table ‘user_credential’ contains 70 million user records containing email addresses, full names, passwords with bcrypt hash, titles, company names, IP addresses and other data related to the system.
The document database contains the title of a file, whether it was created, signed, which account owns the document, and whether it is public.
Important documents and accounts
This is where companies like Google, Microsoft or Apple appear. According to the researchers with the data they have obtained, 3,330 accounts and 2,390 documents have been leaked in the case of Microsoft , 584 accounts and 6,405 documents from Apple, and finally, from Google , the most affected, 3,678 accounts and 32,153 documents. Many other organizations have also been affected.
As they indicate, the titles of these documents alone reveal a great deal of information about financial reports, M&A activities, or product launches.
In case all this is confirmed and the attackers have actually stolen these confidential documents, we would be facing one of the largest corporate-level data leaks in recent years. Keep in mind that many companies use Nitro to digitally sign documents, so it could allow really important information to leak out that could affect that company.
As we know, privacy is a vital factor for both private users and organizations. Suffering a data breach like the one we’ve seen in this article can seriously harm a business. That is why we always recommend improving security. We leave you an article with tips to keep a business network safe.
