← Back to context

Comment by kortilla

3 hours ago

No, a leaked credential is a nothing event in a mass leak as far as expected loss goes.

You’re better off waiting and monitoring until you’re sure you can get back online if your service supports any kind of revenue.

A nothing event? Having access to our database is a nothing event? For most applications, all they keys a businesses castle are stored in a platform providers parameter store / secret key system. Downtime is bad for customers and slightly bad for a business. Stolen credentials are critical for both.