Database software company MongoDB has disclosed a malicious hack of its corporate systems and warned that customer account metadata and contact information was part of the stolen data.
In a short notice posted over the weekend, the New York-based MongoDB said it detected “suspicious activity” on its network on December 13th and later confirmed the hackers had infiltrated its systems “for some period of time before discovery.”
The company did not provide any additional information on the compromise.
In a notice to customers, MongoDB Chief Information Security Officer Lena Smart said the company was not aware of any exposure to the data that customers store in its flagship MongoDB Atlas product.
“Nevertheless, we recommend that customers be vigilant for social engineering and phishing attacks, activate phishing-resistant multi-factor authentication (MFA), and regularly rotate their MongoDB Atlas passwords,” Smart said.
Related: Unprotected MongoDB Instance Exposes 800 Million Emails
Related: Thousands of MongoDB Databases Found Exposed on the Internet
Related: Multiple Attackers Hijacking MongoDB Databases for Ransom
Related: MongoDB Tightens Security Amid New Database Attacks
