OpenWRT, an open source firmware solution for home routers, was breached exposing the email addresses of many of its forum users.
The breach was publicized in a forum post revealing that an admin account without two-factor authentication was the gateway to the sensitive data.
The breached exposed the email addresses, handles and other statistical information for a selection of forum members.
While this breach may not have exposed Personal Identifiable Information, if sensitivity is measured by compromise potential, the exposed data was highly sensitive.
OpenWRT is an open source platform so a majority of its members are developers that are likely selling OpenWRT compatible software and routers to other companies.
Since such a relationship requires access to sensitive company data, a compromised OpenWRT developer could lead to a supply chain attack impacting all of the developer’s clients.
OpenWRT has urged all members to keep a vigilant eye on potential phishing emails attempting to access the sensitive data of business partners.
.jpeg)
