Case study - 61,000 customer records found on a forgotten staging store
We mapped 187 DNS records and 63 live hosts across three brands.
- System
- E-commerce group with three brands
- When
- Previous engagement
- Service
- External attack surface review
Overview
An e-commerce group with three brands asked for an external attack surface review.
What we did
We mapped 187 DNS records and 63 live hosts across the three brands.
What we found
A forgotten staging store held 61,000 real customer records with no password.
Result
The store was taken offline within 40 minutes of the report. The surface is now rescanned every month.
What it touched
- Attack surface
- Data exposure
- Monitoring
- DNS records mapped
- 187
- Live hosts
- 63
- To take it offline
- 40 min