← Back to Breach Management
BR-2026-008ClosedMedium

CRM Misconfiguration

Owner: Rohit Sharma – Privacy · Business unit: IT · Detected 15 Dec 1969, 08:00 am

Breach Closed
Closed 17 Dec 1969, 10:00 am by Rohit Sharma – Privacy

Incident Summary

A CRM integration wrote customer notes to a publicly readable storage bucket for a short period. The bucket policy was corrected and access logs reviewed.

Breach Details

Occurred
14 Dec 1969, 02:00 am
Detected
15 Dec 1969, 08:00 am
Source
System Misconfiguration
Detection method
Security Monitoring
Location
Bengaluru, India
Business unit
IT
Systems affected
CRM
Data Processor
No
Records affected
1,340
Data Principals affected
1,340
Nature of breach
Unauthorized Access, Confidentiality Breach
Data categories
Name, Email, Customer ID

Risk

41 / 100
Medium
LowMediumHighCritical
Data sensitivityLow
Number affectedMedium
External exposureMedium
Financial impactLow
Credential exposureLow

Current Status

Breach lifecycle progress.

  1. Detected
  2. Assessment
  3. Confirmed
  4. Board Notification
  5. DP Notification
  6. Remediation
  7. 7
    Closed
    Current stage