TSS Link: about 250 support credentials and inquiry data may have leaked

An attacker exploited a flaw in an extension for WordPress website-building software used by its outsourced corporate, product support, trial download and product help websites. The affected period ran from 12 June to 13 October; the intrusion was found on 13 October. [1]

About 250 registered support user IDs and login passwords may have leaked. Separately, about 160 inquiry and trial application submissions may be affected, including names, emails, phone numbers, company and department names, maintenance user IDs, messages and attachments. No deduplicated total for the two groups was published. [1]

No conclusive evidence of data theft was found, but incomplete logs prevent it being ruled out. Customer and contract data linked to IDs are held in another system, with no confirmed leak. No security problem in its products or clear resulting harm has been found. [1]

It removed unauthorized administrator accounts, files and the exploited extension, and closed the known entry route. It reported to the privacy regulator on 20 October. It will contact affected users, reissue IDs and passwords, and continue investigating. [1]