← Retool

2023 Retool — phishing, employee credentials, customer data

2023 Unknown records affected Share on X

Data compromised

Names, SSNs, addresses, emails, phones, DOB

Technical writeup

Smishing attack impersonating HR; employee clicked link and submitted credentials. Attacker gained access. MG Stover, Off the Chain, NextProtocol Capital, North Island Ventures affected. Names, SSNs, addresses, emails, phones, DOB exposed.

Root cause

Phishing; social engineering

References