Data related to $44 billion software company Atlassian was stolen by a third-party app, the company confirmed Thursday.
See also: Scandinavian Airlines: Cyberattack led to data leak
On Wednesday, Atlassian was notified of a breach involving its Envoy app, which helps businesses organize office space. A company spokesperson revealed the information to The Record.
The spokesperson said that customer and product data is not accessible from the app, however it appears that employee records, building floor plans and additional information have been stolen .
In an official statement to The Record, Envoy said its systems were not compromised during the recent breach.
See also: How does the new Frebniis malware work?
"Our initial investigation indicates that a hacker gained access to the valid credentials of an Atlassian employee to gain access to the Atlassian employee directory and office floor plans located in the Envoy app," the spokesperson said.
Envoy has dozens of high-profile clients, including Slack, Pinterest, Golden State Warriors, Salvation Army, Hulu, and Lululemon.
On February 15, reports of a breach at the tech giant began circulating online when the SiegedSec group posted details about the breach on Telegram along with photos of the stolen files.
After reviewing the documents, Check Point security researchers discovered two different floor plans of Atlassian's San Francisco office and a JSON file with over 14,000 records that included names, phone numbers, emails, and more.
Check Point confirmed Atlassian's assessment that the group "did not directly hack Atlassian.".
According to Check Point, the SiegedSec group has been active since April 2022, and researchers said they "have not yet revealed their agenda or origins.".
Source of information: therecord.media
