> To make sure this doesn't happen again, OWASP said it disabled directory browsing and checked the web server for additional configuration and security issues,

> To make sure this doesn't happen again, OWASP said it disabled directory browsing and checked the web server for additional configuration and security issues, and removed all of the resumes from the site. > Additionally, the foundation purged the CloudFlare caches, and requested that the accessed data be removed from the web archive. If the attacker didn't break in but rather accessed public internet facing traffic is it really a breach? What was breached? The webserver? on port 80? [0] [0] https://owasp.org/blog/2024/03/29/OWASP-data-breach-notification https://owasp.org/blog/2024/03/29/OWASP-data-breach-notifica...