This week, the security company Transmit Security notified their customers that the firm had suffered a data breach. The breach included information for over one thousand accounts, including email addresses, passwords, phone numbers, and “other sensitive information” according to the researchers who discovered the breach. Transmit Security though denies that any passwords were impacted. According to a statement from Transmit Security and the information provided to them by the researcher, it appears that the attackers gained access to the NextCloud instance used by Transmit Security. NextCloud is a file sharing support system which is used by Transmit Security to distribute information to customers. According to the researcher who discovered the compromise, source code, binaries, and emailed communications were also compromised by the breach. Transmit Security claims that their source code was not leaked. Transmit Security also made sure to include that this only affected Transmit Security customers; clients of their customers were not affected.
With all the news around COVID-19/Coronavirus, the average person is turning to the internet for