Somewhat ironically a company offering to protect individual’s identities online exposes their encrypted customer’s identities online and the ability to decrypt them.
Given their company's mission and product's intention, this had the potential to be a business-ending event however their incident response was so customer centric that they managed to salvage the situation.
According to Nir Polak at Exabeam, it is "the best example of the power of a credential-based or stolen identity attack”
Want to discuss this case? You can purchase a 30 minute conference call with our analysts to discuss this case and the implications it has for your organisation. Just select the time and date that works for you:
We've done the analysis so you can make the decisions