Data from Trello boards of thousands of Russian companies got into open access

Analysts at Infosecurity a Softline company have discovered a leak of almost a million public boards of the Trello project service. Thousands of them contain confidential information that is now indexed by search engines. About it writes Kommersant.

According to analysts, this was not due to a hacker attack, but due to the carelessness or negligence of Trello employees. Such a large-scale leak has never happened before.

The data of several hundred large and thousands of small Russian companies appeared in the public domain. They often use Trello boards to maintain lists of employees and customers, credentials from corporate accounts, contracts, passport scans and other documentation.

Attackers may well use the information leaked to the Network to attack clients of companies or hack corporate Instagram accounts, Infosecurity notes. A Kaspersky Lab representative recommends that companies switch to paid online project managers or not post confidential information in Trello.

Trello, owned by Australian developer Atlassian, has over 50 million users and claimed 80% of Fortune 500 companies use it in 2017.