Razer releases data on 100,000 customers
In this article (4)
Global gaming retailer, manufacturer and payments ecosystem Razer has inadvertently exposed personal information about some 100,000 of its customers online due to a misconfigured server.
The data was stored on an Elasticsearch cluster that was set to allow public access, potentially exposing the customers to targeted phishing attacks by individuals posing as the company. Sensitive personal data such as credit card numbers and passwords were not revealed.
According to a comment posted by the firm, the server misconfiguration was fixed on September 9 prior to the lapse being made public. The information had been exposed for three weeks as Razer’s non-technical staff processed a report alerting the firm to the problem.
The breach was uncovered by cybersecurity consultant Volodymyr Diachenko, who has since offered to conduct a live educational session to raise cybersecurity awareness within the firm. It is unclear whether or not Razer has accepted the offer.
Questions & Answers
Q.What type of customer data was exposed by Razer?
What type of customer data was exposed by Razer?
Personal information about approximately 100,000 customers was exposed. This included data that could facilitate targeted phishing attacks by individuals impersonating Razer. Credit card numbers and passwords were not among the revealed information.
Q.How long was the customer data exposed before the issue was fixed?
How long was the customer data exposed before the issue was fixed?
The customer data was exposed for three weeks. This period elapsed while Razer's non-technical staff processed the report alerting the firm to the server misconfiguration problem. The issue was fixed on September 9.
Q.Who discovered the data exposure at Razer?
Who discovered the data exposure at Razer?
Cybersecurity consultant Volodymyr Diachenko uncovered the data exposure. He has since offered to conduct an educational session to enhance cybersecurity awareness within the firm, though it is unknown if Razer accepted.
Reader pulse
What's the biggest lesson from Razer's data lapse?
24,555 votes so far