PR TIMES: admin system intrusion; data may have leaked

An intrusion beginning April 24 was detected on April 25. A shared administrative account and allowed IP address were abused, and backdoors were installed. Up to 901,603 personal records and 1,682 unreleased announcements from 1,182 companies were potentially exposed. Malicious access was blocked by April 30; distribution services were unaffected. On December 16 it completed migration away from the old internal administration system and implemented permanent deletion of deleted data after 30 days. Misuse remained unconfirmed.