Bug tracking platform Rollbar reports data breach
Learn More
Rollbar, a company specializing in software bug tracking, has disclosed a significant data breach that occurred when unidentified attackers successfully breached their systems in early August. Malicious actors managed to gain access to customer access tokens, potentially compromising sensitive information.
Rollbar's error logging and tracking services are widely utilized by more than 400 million application end users and numerous companies globally, including prominent names such as Salesforce, Twilio, Uber, Twitch, and Pizza Hut. In the previous year, Rollbar reported assisting over 5,000 customers and 23,000 paid users in processing a staggering 40 billion errors.
The discovery of this security breach was made by Rollbar on September 6, as they were reviewing logs. These logs indicated that a service account had been utilized to log into the cloud-based bug monitoring platform, alerting Rollbar to the unauthorized access.
Once inside Rollbar's systems, the threat actors conducted searches within the company's data, with a particular interest in cloud credentials and Bitcoin wallets. Rollbar reported, "When we became aware of this access, we disabled the service account and began analyzing what actions had been taken by the unauthorized party. The party first tried to launch compute resources, and after that failed for lack of permission, they accessed the data warehouse and ran searches that suggested they were interested in Bitcoin wallets or other cloud credentials."
Rollbar's subsequent investigation revealed that these attackers had maintained access to their systems for a span of three days, occurring between August 9 and August 11, 2023. During this time, they were able to access sensitive customer information, including
- usernames,
- email addresses,
- account names,
- project details such as environment names and service link configurations.
The number of impacted customers and the method of compromising the service account are not disclosed.
One of the most concerning aspects of this breach is the theft of customers' project access tokens, which are essential for interacting with Rollbar projects. Rollbar has taken steps to mitigate this by expiring access tokens that provide read and write scope immediately and access tokens allowing data transmission to active projects will expire within 30 days.
