Forest Global Training Partners

Cyber Risks · Krebs on Security

Further Down the Trello Rabbit Hole

Summary: Flashpoint analyst David Shear spent several weeks documenting hundreds of public Trello boards exposing passwords and other sensitive data, including credentials posted by a Seceon cybersecurity firm employee, a Red Hat senior software engineer in October 2017, the Maricopa County Department of Public Health, and HealthIT.gov, part of HHS. Trello made many of the reported boards private and said it was working with Google to remove cached copies, while co-founder Michael Pryor said the company would consider Shear's suggestion of automated keyword scanning for terms like "password" on public boards.

What's compelling: The exposed boards belonged to organizations whose job is to protect data - a firm selling real-time breach detection, a Linux vendor's engineer, and a federal health IT office - and Shear said he doubts his finds come close to the real depth of what is public.

Read the original at Krebs on Security ↗

Topics
Detection & Response
Related
YARA-X 1.23.0 Release, (Sun, Nov 15th) Cyber Risks · Nov 15, 2026