Security News > 2023 > December > MongoDB corporate systems breached, customer data exposed

Database management company MongoDB has suffered a breach: attackers have gained access to some of its corporate systems and customer data and metadata.

On Sunday, MongoDB noted that, at this time, they "Have found no evidence of unauthorized access to MongoDB Atlas clusters", not that the Atlas cluster authentication system - which is separate from MongoDB corporate systems - has been compromised.

The corporate systems accessed by the attackers contain customer names, phone numbers, and email addresses and system logs for one customer.

"We have notified the affected customer. At this time, we have found no evidence that any other customers' system logs were accessed," they added.

With personal data being exposed, customers should keep an eye on any suspicious activity involving their accounts.

As the company suspects that the attackers have had access to the systems "For some period of time before discovery", it's likely that scope of the breach will widen.

News URL

https://www.helpnetsecurity.com/2023/12/18/mongodb-breach/