BrowserStack Data Breach (Incident)
ID: 4b9b06d2-9131-56ae-936e-d0ab141cfbdf
STIX ID: report--4b9b06d2-9131-56ae-936e-d0ab141cfbdf
Feed Name: Wiz Cloud Threat Landscape
Date Published: 2014-11-09
Date Updated: 2026-05-01
Author: [email protected] (Wiz Threat Research)
On November 9, 2014 BrowserStack was breached when an attacker exploited the Shellshock vulnerability on an unpatched prototype server, retrieved AWS credentials, accessed a backup, and partially copied user data (emails, hashed passwords, and test URLs); BrowserStack blocked the attacker, confirmed no full credit card data was exposed, revoked AWS keys, implemented encrypted backups and additional security checks, and initiated a third-party security audit.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.