Get the latest tech news
Zapier says someone broke into its code repositories and may have customer data
The breach stemmed from a 2FA “misconfiguration.”
Zapier’s platform allows users to create automations that work across other companies’ apps and services, potentially putting it in the middle of a lot of sensitive information. The hacker was able to access the repositories because of a “two-factor authentication (2FA) misconfiguration on an employee’s account.” The company says it is now conducting a review of its processes to “ensure this does not occur again.” Due to a two-factor authentication (2FA) misconfiguration on an employee’s account, an unauthorized user gained access to certain Zapier code repositories.
Or read this on Hacker News
