4 ms·
Is there any evidence there has been a breach of CircleCI directly, or just that MongoHQ suspended all access to their database(s) and so the service went down?
by Cogito 13y ago
Is there any evidence there has been a breach of CircleCI directly, or just that MongoHQ suspended all access to their database(s) and so the service went down?
At this point it doesn't seem like they were 'hacked'[0], but simply involved in a larger security incident.
[EDIT] seems the linked page doesn't mention 'hacked' anywhere (literally - I searched for it!) Seems like the title[0] is a classic case of editorialising
[EDIT 2] As per below, would be very interested to see if their database being 'compromised' means that data was actually accessed by the attackers, or if they are just fall out from the bigger attack
[0] original submitted title was "CircleCI has been hacked"
- thejosh 13y ago>We are contacting you to inform you of an ongoing security incident affecting CircleCI customers, as a result of the compromise of our database (http://security.mongohq.com/notice http://security.mongohq.com/notice). Seems like a 'security incident' is code for 'hacked'.
- Cogito 13y agoI think I agree with you, however there is a big difference between having your service stopped as a precaution and having data lost/accessed by a 3rd party. From that line it does seem more likely that they might be one of MongoHQ's clients who MongoHQ noticed had had their data accessed as part of the bigger breach. In that context, saying they have been hacked is probably fair. Would love more details.