已确认

TeamSpirit: 28,824 personal-data records of customer users and staff leaked via development-server intrusion

On October 27, 2026, TeamSpirit confirmed a third party logged into a development server and used credentials stored there to take data from its cloud environment.

最后更新: 2026-11-09

此内容以 English 显示。

概述

28,824 deduplicated records (including 35 sensitive items): customer contacts' names, emails and login IDs, part of customer employees' attendance records kept for maintenance, and staff data. No access to production attendance data was found. The cause was misconfiguration and poor information handling on the development server.

时间线

  1. 发生
  2. 发现
  3. 披露

组织应对措施

Stopped the server, cut access, invalidated credentials, reported to the PPC on October 30 and is contacting those affected.

用户应对建议

Be wary of emails, SMS or calls impersonating the organisation; do not open links or attachments or enter passwords or card details. Change reused passwords on other services.

信息来源

  1. 不正アクセスによる情報漏えいに関するお詫びとお知らせ株式会社チームスピリット · 2026-11-09

相关信息与讨论

提交信息

暂无公开信息

来源核实或审核通过后,信息将显示在此处。

评论与回复

写评论

无需注册。评论提交后立即公开。

请勿发布私人姓名、地址、密码或验证码。自动遮盖有局限,请在提交前检查。