FlexBooker Reveals Major Customer Data Breach

An on the web scheduling software package supplier has released particulars of a cloud breach over the festive period of time, ensuing in the theft of thousands and thousands of customers’ private specifics.

FlexBooker offers appointment scheduling software package for companies in health care, finance and other sectors to take bookings on their web page.

Having said that, late last week, breach notification web-site HaveIBeenPwned exposed that 3.7 million purchaser accounts had been compromised in December. It pointed out that most (69%) of the facts was already in its databases, presumably because of to preceding breaches and information reshared across multiple web pages.

✔ Approved From Our Partners

Protect and backup your data using AOMEI Backupper. AOMEI Backupper takes secure and encrypted backups from your Windows, hard drives or partitions. With AOMEI Backupper you will never be worried about loosing your data anymore.

Get AOMEI Backupper with 72% discount from an authorized distrinutor of AOMEI: SerialCart® (Limited Offer).

➤ Activate Your Coupon Code

FlexBooker released a detect quickly soon after, admitting that its cloud programs have been targeted.

“On December 23, 2021, starting off at 4:05 PM EST our account on Amazon’s AWS servers was compromised, resulting in our short-term incapability to provider shopper accounts, and blocking customers from accessing their information,” it claimed.

“As portion of the incident, our technique knowledge storage was also accessed and downloaded. In reaction to the outage, we worked intently with Amazon to restore a backup, and ended up capable to restore operations inside 12 hrs.”

It’s unclear how the attackers were being ready to compromise the FlexBooker account and regardless of whether human mistake this sort of as cloud misconfiguration experienced nearly anything to do with it.

In accordance to FlexBooker, the stolen information incorporated customers’ complete names, email addresses and phone numbers. It claimed that no payment card facts have been compromised, while according to HaveIBeenPwned, “partial credit score card data” was taken.

Customer passwords have been encrypted, and the encryption essential was not accessed or downloaded, FlexBooker included.

It urged victims of the breach to review accounts for any suspicious activity, receive a credit report, and take into account inserting a fraud alert on the report, as perfectly as searching for a credit rating freeze.

Only 3% of breach victims location a credit freeze on their accounts despite it staying a far a lot more effective fraud mitigation technique than credit monitoring.

It stops creditors from getting a credit history report about an unique, this means they simply cannot open up any new traces of credit rating, nor can fraudsters use stolen identity information and facts.