OWASP Data Breach Due to Wiki Web Server Misconfiguration

The Originate Web Application Security Project (OWASP) Foundation disclosed a essential data breach. The breach, which turned into once realized in gradual February 2024, turned into once prompted by a misconfiguration of the foundation’s former Wiki internet server.

This incident has ended in the exposure of decade-former member resumes containing sensitive personal data.

OWASP, known for its dedication to bettering instrument security, reported that the breach specifically affected contributors who joined the organization from 2006 to spherical 2014.

For the period of this period, contributors were required to put up resumes as piece of the membership process to yelp their connection to the OWASP neighborhood.

The resumes included names, electronic mail addresses, phone numbers, physical addresses, and varied individually identifiable data (PII).

Misconfiguration Ends in Info leak

Upon discovering the misconfiguration following a lot of crimson meat up requests, OWASP took instant motion to address the breach.

The muse has disabled itemizing shopping and completely reviewed the derive server and Media Wiki configuration to name and rectify varied potential security issues.

To forestall further unauthorized accept admission to, all resumes had been eradicated from the wiki location, and the Cloudflare cache has been purged.

Additionally, OWASP has reached out to the Web Archive with a request to dispose of the uncovered resume data, thereby taking away any lingering traces of the breach on-line.

The muse has also initiated contact with affected folk despite the challenges posed by the outdated nature of the data and the reality that a lot of the folk are now no longer connected with OWASP.

The OWASP Foundation has identified the breach’s significance, in particular given its characteristic in promoting cybersecurity consciousness and most efficient practices.

In an professional commentary, the foundation apologized to those impacted by the incident and reassured the final public of its dedication to preventing such breaches in the kill.

As piece of this dedication, OWASP is reviewing its data retention insurance policies and plans to place in power extra safety features to abet the safety of member data.

The incident highlights the importance of sturdy security configurations and the prospective penalties of any oversights on this set apart.

OWASP’s clear facing of the breach and its proactive steps to mitigate the impact exemplify the organization’s dedication to upholding the absolute best requirements of data security and privateness.

Individuals who suspect their data might perhaps perhaps also had been compromised are informed to stay vigilant in opposition to unsolicited communications and to rob the identical outdated precautions when responding to surprising emails, mail, or phone calls.

OWASP assures that no instant motion is required if the data at risk is outdated. On the different hand, the foundation encourages those with present data at risk to be in particular cautious.

The OWASP Foundation’s fats data breach notification will be stumbled on on their professional weblog, offering further famous aspects on the incident and the measures taken in response.

Save as a lot as this point on Cybersecurity news, Whitepapers, and Infographics. Note us on LinkedIn & Twitter.