Rubrik Gets Hit by The GoAnywhere Security Vulnerability: Is Customer Data at Risk?
Table of Contents
- By Steven
- Published: Mar 23, 2023
- Last Updated: Mar 24, 2023
Rubrik is a security company that specializes in cloud data management services. The company helps store and secure information for customers, and it's vital that it is able to keep that data safe. This is why hearing about a possible cyber-attack on the company is alarming. Rubrik was hit by the same GoAnywhere security vulnerability that dozens of other companies suffered from. The company put out a statement about the attack letting customers know what they could expect and if their data was in any danger.
How Did the Attack Occur?
The attack on Rubrik's file systems occurred like all the other GoAnywhere-based attacks. The Clop gang leveraged a security vulnerability in the file transfer service GoAnywhere to get into internal systems at Rubrik. Fortunately for the company, the attacks only led to an internal testing environment with simple employee data rather than one of the servers holding customer data inside. This is good news for the company, and it makes the attack a more minor issue than it was for some of the more than 130 companies that were hit by the same security vulnerability.
What Information Was Viewed or Stolen?
In the cyber-attack on Rubrik, the company claims no customer data was stolen at all. The Clop gang showed off screenshots from an internal company spreadsheet that appears to have employee information on it. Even if the spreadsheet is genuine, it doesn't go against Rubrik's claim that no customer data was leaked because employee data would not count. We don't yet know the full extent of the company data that was leaked because of this attack, but if employees or customers had financial or protected personal information leaked because of the attack, Rubrik would send out personalized letters to each person involved making them aware.
How Did Rubrik Admit to the Breach?
Rubrik put up a statement on its company website informing its customer base about the potential incident. The statement talks about which Rubrik systems were impacted by the attack and goes on to say that no customer data was involved.
What Will Become of the Stolen Information?
According to the Rubrik team, no sensitive information was accessible from the system that was compromised during the data breach. If it was indeed a test environment system, that seems likely to be true. If the attackers don't have access to any confidential information, there is little that the gang can do with the acquired information. The team will share it online and try to obtain payment from Rubrik, but if the data isn't sensitive, Rubrik is unlikely to pay or to be concerned.
What Should Affected Parties Do in the Aftermath of the Breach?
There is nothing for the involved parties to do at this time. No vital information was shared, and there should not be a serious risk to anyone. If you believe your data is housed by Rubrik, you should keep an eye on the company and watch for any new information to come out about this attack. If you use the GoAnywhere
