MongoDB Investigates Security Breach Exposing Customer Data
No evidence of unauthorized access to Atlas customers found, but corporate systems containing customer metadata were compromised.
- Database management firm MongoDB is investigating a security breach that exposed customer account metadata and contact information.
- The company detected suspicious activity on December 13 and suspects the unauthorized access had been ongoing for some time before it was discovered.
- MongoDB has found no evidence of authorized access to its Atlas customers, a reference to its Database-as-a-Service offering.
- The breach involved unauthorized access to corporate systems that contain customer names, phone numbers, and email addresses among other customer account metadata, including one customer's system logs.
- MongoDB has not disclosed how many customers may be affected by the breach, but it has recommended that customers remain vigilant for social engineering and phishing attacks.