Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Data Breaches

MongoDB Confirms Hack, Says Customer Data Stolen

MongoDB CISO Lena Smart said the company was not aware of any exposure to the data that customers store in the MongoDB Atlas product. 

MongoDB data breach

Database software company MongoDB has disclosed a malicious hack of its corporate systems and warned that customer account metadata and contact information was part of the stolen data.

In a short notice posted over the weekend, the New York-based MongoDB said it detected “suspicious activity” on its network on December 13th and later confirmed the hackers had infiltrated its systems “for some period of time before discovery.”

The company did not provide any additional information on the compromise.

In a notice to customers, MongoDB Chief Information Security Officer Lena Smart said the company was not aware of any exposure to the data that customers store in its flagship MongoDB Atlas product. 

“Nevertheless, we recommend that customers be vigilant for social engineering and phishing attacks, activate phishing-resistant multi-factor authentication (MFA), and regularly rotate their MongoDB Atlas passwords,” Smart said.

Related: Unprotected MongoDB Instance Exposes 800 Million Emails

Related: Thousands of MongoDB Databases Found Exposed on the Internet

Related: Multiple Attackers Hijacking MongoDB Databases for Ransom

Advertisement. Scroll to continue reading.

Related: MongoDB Tightens Security Amid New Database Attacks

Written By

Ryan Naraine is Editor-at-Large at SecurityWeek and host of the popular Security Conversations podcast series. He is a security community engagement expert who has built programs at major global brands, including Intel Corp., Bishop Fox and GReAT. Ryan is a founding-director of the Security Tinkerers non-profit, an advisor to early-stage entrepreneurs, and a regular speaker at security conferences around the world.

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Gain valuable insights from industry professionals who will help guide you through the intricacies of industrial cybersecurity.

Register

Join us for an in depth exploration of the critical nature of software and vendor supply chain security issues with a focus on understanding how attacks against identity infrastructure come with major cascading effects.

Register

Expert Insights

Related Content

Cybercrime

A recently disclosed vBulletin vulnerability, which had a zero-day status for roughly two days last week, was exploited in a hacker attack targeting the...

Data Breaches

OpenAI has confirmed a ChatGPT data breach on the same day a security firm reported seeing the use of a component affected by an...

Cybercrime

Zendesk is informing customers about a data breach that started with an SMS phishing campaign targeting the company’s employees.

Data Breaches

LastPass DevOp engineer's home computer hacked and implanted with keylogging malware as part of a sustained cyberattack that exfiltrated corporate data from the cloud...

CISO Strategy

Okta is blaming the recent hack of its support system on an employee who logged into a personal Google account on a company-managed laptop.

Incident Response

Microsoft has rolled out a preview version of Security Copilot, a ChatGPT-powered tool to help organizations automate cybersecurity tasks.

Data Breaches

Sony shares information on the impact of two recent unrelated hacker attacks carried out by known ransomware groups.