When Your Employees Post Passwords Online
Summary: KrebsOnSecurity used Google to find unprotected personal Trello boards listing employer passwords and other sensitive data, including boards at an insurance firm, a state government agency and Uber, where developers in the Asia-Pacific region posted passwords needed to view internal Google Documents and images. Uber spokesperson Melanie Ensign said the board was made private after notification, that it exposed information on two users in South America who were notified, and that the report came through the company's bug bounty program, which pays at least $500.
Bottom line: The exposure was found by searching a public collaboration tool with Google, not by any internal control, and Uber's own spokesperson said the company 'may have dodged a bullet here, and it definitely could have been worse.'
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026