Discovered Serious Misconfiguration On Server Host

This got me thinking if you were host in this situation, what would you tell the customer who’s file was downloaded.

“For a moment in time our server was vulnerable to a certain method of attack, and we’ve confirmed that your data has been directly accessed by an attacker. For your benefit we have changed your passwords and updated your script config files, please make sure that we did not overlook something.”

8 Likes