Sophos data leak: Cyber security firm exposed a subset of customer data

By Jay Jay for teiss
Thursday, November 26, 2020

• 3.1k
• 12
• 12
• 12
• 6
• More
• 12
• 12

Sophos is presently-owned by U.S. private equity firm Thoma Bravo that acquired the British maker of antivirus and encryption products for about $3.8 billion in October last year. The acquisition took place on the heels of dismal results from Sophos as it saw waning demand for cyber security tools and it shed a third of its value in 2018.

Commenting on the data leak committed by Sophos, Ilia Kolochenko, Founder & CEO of ImmuniWeb, said that the incident is a colorful reminder that no one is immune from a human error exacerbated by the pandemic’s havoc and growing complexity of the modern threat landscape. Continuous attack surface monitoring is the must-have solution to timely detect, respond, and mitigate the growing complexity of IT infrastructure, human omissions, and related misconfigurations.

The incident, however, Kolochenko said, will unlikely have any major consequences for the victims as no highly sensitive information, such as banking, health, or credit card data, was reportedly exposed. Sophos also reacted quickly and professionally, taking accountability for the incident with adequate mitigation.

This is the second time this year that Sophos has had to deal with a data security incident. In April, the firm revealed that cyber criminals exploited a SQL injection vulnerability in the management interface of XG firewall to exfiltrate user data such as usernames, passwords, and local device admins. Read Full Article