logo

Employee monitoring app exposes users, leaks 21+ million screenshots

ID: 9203181f-da2d-5bfa-9d17-ad155f724cc3

STIX ID: report--9203181f-da2d-5bfa-9d17-ad155f724cc3

Feed Name: Malwarebytes Blog

Threat Score
70/100

Date Published: 2025-04-28

Date Updated: 2026-04-28

...
...

WorkComposer, an employee-monitoring application, exposed over 21 million screenshots in an unsecured Amazon S3 bucket, potentially revealing logins, internal communications, and sensitive business or personal information; the bucket was secured after notification but there is no evidence provided of malicious access, and affected users are advised to change passwords, enable strong 2FA, monitor for phishing, set up identity monitoring, and report suspicious activity.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.