Comment by kortilla
5 hours ago
No, a leaked credential is a nothing event in a mass leak as far as expected loss goes.
You’re better off waiting and monitoring until you’re sure you can get back online if your service supports any kind of revenue.
5 hours ago
No, a leaked credential is a nothing event in a mass leak as far as expected loss goes.
You’re better off waiting and monitoring until you’re sure you can get back online if your service supports any kind of revenue.
A nothing event? Having access to our database is a nothing event? For most applications, all they keys a businesses castle are stored in a platform providers parameter store / secret key system. Downtime is bad for customers and slightly bad for a business. Stolen credentials are critical for both.
What are you talking about.
He’s living in an industry where the customer have zero protections
Late stage capitalism at its finest; protect the profits at all costs.
Thankfully, they clarified they're in Europe, so GDPR prevents them from ignoring known leaked credentials, lest they have that to deal with, on top of the revenue loss they'll make when all of their customers eventually find out: "they ran leaked credentials knowing our data was at risk, but decided to suck it and see".