UK-based software giant Sage has blamed an attacker for a recent data breach that came to light over the weekend who used an internal login to gain access to the details of around 300 businesses
It's not yet clear whether it was a rogue employee who accessed the data or if it was an external attacker who compromised the employee's credentials and used them to steal the data from the company's servers.
According to Richard De Vere, Sage became aware of the breach last week and began notifying its customers on Thursday, August 11.
Two days later, De Vere went public with the attack on his blog, criticizing some of Sage's techniques in handling the incident.
The security expert pointed out that the company should have emailed its customers instead of calling them.
In a phone conversation, a Sage representative confirmed to De Vere that the incident had occurred due to an internal breach.
The Sage spokesperson also told De Vere that the forensics team had yet to determine exactly what the attacker had access to and how many customers were affected.
Here is Sage's official statement in its entirety:
" We believe there has been some unauthorized access using an internal login to the data of a small number of our UK customers so we are working closely with the authorities to investigate the situation. Our customers are always our first priority so we are communicating directly with those who may be affected and giving guidance on measures they can take to protect their security. If you have any concerns at all, you can reach us on the following contact details: The dedicated helpline number is 0845 145 3345 – please leave a message with your details and we will get back to you as soon as we can. You can also get in touch with us by emailing us at customercontact@sage.com
