Joomla suffers security breach exposing user records

Joomla suffers security breach exposing user records

It total, 2,700 user records were exposed, Hackread.com has learned.


The team behind Joomla, the third most widely used open-source content management system (CMS) after WordPress, has disclosed a security breach that occurred last week.


Reportedly, a company employee mistakenly left unencrypted data backup while using its Resource Directory portal exposing around 2,700 records of customers who have signed up for the portal.


The backup was left onto the Amazon Web Services (AWS) S3 Bucket, a third-party data storage platform. Currently, the team is investigating whether the database was accessed by anyone or not. 


Joomla is a commonly used CMS for building and managing self-hosted websites and boasts of an utterly vast userbase. It is believed that the security breach may have affected a small portion of its userbase, primarily those who signed up on its Resources Directory (RD).

The RD is a portal designed to let Jooma professionals market their skills and expertise in website building, managing, and marketing.


According to the information shared by Joomla, the backup file was unencrypted and personal details like full name, IP address, business email, and physical address, company URL, business type and phone number, encrypted/hashed password, and newsletter subscription preferences might have been exposed. 


See: db8151dd breach- Contact management firm leaks 22 million emails


Fu ..

Support the originator by clicking the read the rest link below.