[eyelock]

MongoDB announced on Last Saturday that it is currently conducting a thorough investigation into a security breach. This breach has resulted in unauthorized access to specific corporate systems, leading to the exposure of customer account metadata and contact information.

The occurrence of this unauthorized access persisted for an undisclosed duration prior to its detection, however, it is crucial to highlight that no evidence suggests any exposure of the data stored by customers in MongoDB Atlas. The specific timeframe of the compromise has not been disclosed.

Considering the breach, MongoDB strongly advises all customers to remain vigilant against social engineering and phishing attacks. It is recommended to implement robust multi-factor authentication (MFA) that is resistant to phishing attempts, and also regularly change their passwords for MongoDB Atlas.

[Sharkn]

Lol, again.

[joepa]

Any news on what exactly happened? Guess it's not SQLi

[prajwallitha]

Where can we get the data?

[da_goat]

where to find data

[ssveCY008]

after so many leaked and detected mongodbs, it's time for the company itself to experience a data breach...

[nomnomyourcookies]

This highlights risks of extreme consolidation - even if Atlas customers were not affected it is natural for them to be concerned after announcement overwhelming web site or support channels.

More independent MongoDB DBaaS providers is what would offer true redundancy in this case, though it is highly restricted due to SSPL license change.

Hopefully FerretDB will be successful building feasible alternative

[blackboar]

It's their own fault for defaulting to no user/password on new MongoDB installs.

I've yet to set a password...

[AAAA]

The only thing that matters is Stock Price which goes up everyday

[asadabi]

https://x.com/HackRead/status/1736732752416780418?s=20