2024 Everbridge — corporate network breach; phishing precursor (May)
Data compromised
Business and limited contact/support details; admin-instance descriptors
Technical writeup
Everbridge notified stakeholders after detecting unauthorized access on May 21, 2024, to a limited number of files on its corporate network, stemming from intelligence gathered in an earlier phishing campaign. Disclosure letters summarized exposure of admin-user instance metadata, contact fields for certain users, subscriptions, and enabled access channels. The company retained Mandiant and Stroz Friedberg, denied ransomware, and expanded MFA mandates across corporate accounts.
Root cause
Follow-on intrusion leveraging data from workforce phishing