Gibraltar Life: data stolen from an MDM server

A vulnerable MDM server was accessed on May 16 and data theft identified on May 22. The 550 affected entries contained names, user IDs and work email addresses for staff, former staff and contractors, including deleted records retained by the product. Customer data was excluded. The server was isolated and the vulnerability fixed.