Cylance reports data breach caused by a 'Third-Party Platform'
Learn More
Cylance, a cybersecurity company, has reported that a data breach has led to the sale of old data on a hacking forum. The breach, attributed to a third-party platform, was highlighted when a threat actor known as Sp1d3r offered to sell the data for $750,000.
The exposed data includes:
- 34,000,000 customer and employee emails
- Personally identifiable information (PII) of Cylance customers, partners, and employees
Upon investigation, researchers and Cylance stated that the leaked samples seem to be old marketing data used by Cylance. BlackBerry, the parent company of Cylance, claims that no BlackBerry data or systems related to current customers, products, and operations have been compromised.
The compromised data, dating back to 2015-2018, originates from a third-party platform, predating BlackBerry's acquisition of Cylance.
The same threat actor, Sp1d3r, is also implicated in selling 3TB of data from Advance Auto Parts, which was accessed through a breached Snowflake account. Cylance, confirmed as a Snowflake customer, uses the platform for its web management console.
Recent breaches at Santander and Ticketmaster have also been linked to Snowflake attacks. The attack is blaimed on exploitation of stolen customer credentials and lack of multi-factor authentication (MFA) protections.
