BitDefender, a maker of antivirus software, has admitted that its systems were compromised following rumors that someone was blackmailing the Romanian company for ransom.
The name of the hacker who successfully attacked the security company is Detox Ransome and according to reports he managed to steal BitDefender customer data.
The hacker reportedly was able to obtain and leak usernames and passwords from Bitdefender. The unencrypted login details belonged to some of the security company's small business customers.
The hacker was asking for $15,000 to not reveal the company's customer data. At this point, the data has already been leaked.
Bitdefender, however, stated that its systems had not been compromised, but information had been obtained (!) and that it suspects that the data fell into the hands of the attacker from a cloud account that BitDefender has on Amazon.
Bitdefender said:
We recently found a potential security issue on a single server. We immediately began investigating and found a single request made to a public cloud, which exposed a very limited number of usernames and passwords. Our investigation also revealed that there was no intrusion on our server, but a vulnerability that potentially allowed the exposure of a small number of user accounts and passwords.
The issue was resolved immediately and additional security measures were put in place to prevent it from happening again. As an additional precaution, a password reset notification will be sent to all of our potentially affected customers, which represents less than 1% of our customers.
BitDefender takes the security of its customers very seriously and any issue that could involve the security of our customers or the security of our servers is treated with the utmost seriousness and care.
It should be mentioned that breaches in security service companies are always annoying, even if they are relatively minor.
They prove once again that no one can talk about security on the internet.
