已確認

TeamSpirit: 28,824 personal-data records of customer users and staff leaked via development-server intrusion

On October 27, 2026, TeamSpirit confirmed a third party logged into a development server and used credentials stored there to take data from its cloud environment.

最後更新: 2026-11-09

此內容以 English 顯示。

概述

28,824 deduplicated records (including 35 sensitive items): customer contacts' names, emails and login IDs, part of customer employees' attendance records kept for maintenance, and staff data. No access to production attendance data was found. The cause was misconfiguration and poor information handling on the development server.

時間軸

  1. 發生
  2. 發現
  3. 公布

組織應對措施

Stopped the server, cut access, invalidated credentials, reported to the PPC on October 30 and is contacting those affected.

使用者應對建議

Be wary of emails, SMS or calls impersonating the organisation; do not open links or attachments or enter passwords or card details. Change reused passwords on other services.

資訊來源

  1. 不正アクセスによる情報漏えいに関するお詫びとお知らせ株式会社チームスピリット · 2026-11-09

相關資訊與討論

提供資訊

目前沒有公開資訊

來源確認或審核通過後,資訊將顯示於此。

留言與回覆

寫留言

無須註冊。留言送出後立即公開。

請勿發布私人姓名、地址、密碼或驗證碼。自動遮蔽有其限制,送出前請再次確認。