Users should be aware that attackers may target them and be suspicious about phishing emails. Still, it is possible that the server has been visited before the discovery and the company's reaction. There are no particular details if someone has accessed the database or not and who can be those people. Fraudsters could pose as Adobe or a related company and trick users into giving up further info, such as passwords, for example. The information exposed in this leak could be used against Adobe Creative Cloud users in targeted phishing emails and scams.
Email addresses and other personal-enough details can be helpful for malicious people that focus on extortion and blackmailing scams. Possible outcome after the data breach can lead to serious damageĪttackers may have obtained these details with the purpose of using the credentials in later phishing attacks.
Unfortunately, the name of Elasticsearch has already been mentioned in similar incidents before. Security expert Bob Diachenko collaborated with Comparitech and revealed the unsecured Elasticsearch database containing details of Adobe Creative Cloud service and its users. A poorly protected database of Adobe's Creative Cloud exposes 7.5 million people's data which becomes available to anyone without authentication or passwords required. The Attorney Office hopes that this punishment for the incident at Adobe Systems will teach a lesson to other companies and they will become more serious about information security issues and strengthen the user data protection.Elasticsearch server is under the fire again: database belonging to Adobe Creative Cloud service exposedĪdobe Creative Cloud users got their records leaked. If your data is at threat of leakage, you need to act quickly,” said North Carolina Attorney General Roy Cooper.
“Criminals and hackers are seeking to get our personal and financial data, so business and government must do more to protect them. In a joint lawsuit the authorities accused Adobe Systems of the fact that the company did not use all available tools to protect the information and did not to take any actions to detect the attack in a timely manner. A total of 552 thousands cards of clients from 15 states were compromised. The servers stored customer information, including user names, home and email addresses, telephone numbers, as well as encrypted data on bank cards numbers and expiration dates. Three years ago, the Adobe servers underwent the attack.
#Adobe database leak software
The Attorney Office of North Carolina announced a deal with the Adobe Systems company, according to which the software developer will have to pay a fine of one million dollars for the data leakage that the company allowed to happen in 2013. Adobe to Pay Million Dollar Fine for Three-Year-Old Data Leak