← Back to Breach Management
BR-2026-001Notification in ProgressCritical

Customer Database Exposure

Owner: Rohit Sharma – Privacy · Business unit: Retail · Detected 30 Dec 1969, 05:00 pm

Board Notification SLA
497085h 47m overdue
Detected 30 Dec 1969, 05:00 pm · Deadline 02 Jan 1970, 05:00 pm
Overdue
Detailed Board update: Pending
100% of the 72-hour window elapsed

Incident Summary

A misconfigured access policy on the customer database allowed an external party to query customer records over a 6-hour window. Security monitoring flagged anomalous query volume; access was revoked and the policy corrected.

Breach Details

Occurred
30 Dec 1969, 10:00 am
Detected
30 Dec 1969, 05:00 pm
Source
Unauthorized Access
Detection method
Security Monitoring
Location
Bengaluru, India
Business unit
Retail
Systems affected
CRM, Loyalty Platform
Data Processor
No
Records affected
12,450
Data Principals affected
12,450
Nature of breach
Unauthorized Access, Unauthorized Disclosure, Confidentiality Breach
Data categories
Name, Customer ID, Email, Mobile Number, Transaction Information

Risk

82 / 100
Critical
LowMediumHighCritical
Data sensitivityHigh
Number affectedHigh
External exposureHigh
Financial impactMedium
Credential exposureLow

Current Status

Breach lifecycle progress.

  1. Detected
  2. Assessment
  3. Confirmed
  4. Board Notification
  5. 5
    DP Notification
    Current stage
  6. 6
    Remediation
  7. 7
    Closed