2024 Insider threat — 15,000+ records
Data compromised
Names, emails, phone numbers
Technical writeup
Jan 2024. Threat actor sold database of 15k+ users (Germany, Switzerland, UK) on dark web. Alleged insider: rogue support team employee used phone camera to photograph internal screens ('analog hole'). Exposed: full names, emails, phone numbers. Risk of vishing and credential stuffing. GDPR/FADP implications.
Root cause
Insider threat; employee photographed internal screens.