DigitalOcean has emailed customers warning of a data breach involving customers\u2019 billing data, TechCrunch has learned.<\/p>\n
The cloud infrastructure giant told customers in an email on Wednesday, obtained by TechCrunch, that it has \u201cconfirmed an unauthorized exposure of details associated with the billing profile on your DigitalOcean account.\u201d The company said the person \u201cgained access to some of your billing account details through a flaw that has been fixed\u201d over a two-week window between April 9 and April 22.<\/p>\n
The email said customer billing names and addresses were accessed, as well as the last four digits of the payment card, its expiry date and the name of the card-issuing bank. The company said that customers\u2019 DigitalOcean accounts were \u201cnot accessed,\u201d and passwords and account tokens were \u201cnot involved\u201d in this breach.<\/p>\n
\u201cTo be extra careful, we have implemented additional security monitoring on your account. We are expanding our security measures to reduce the likelihood of this kind of flaw occuring [sic] in the future,\u201d the email said.<\/p>\n
DigitalOcean said it fixed the flaw and notified data protection authorities, but it\u2019s not clear what the apparent flaw was that put customer billing information at risk.<\/p>\n
In a statement, DigitalOcean\u2019s security chief Tyler Healy said 1% of billing profiles were affected by the breach, but declined to address our specific questions, including how the vulnerability was discovered and which authorities have been informed.<\/p>\n
Companies with customers in Europe are subject to GDPR and can face fines of up to 4% of their global annual revenue.<\/p>\n
Last year, the cloud company <\/span>raised $100 million<\/a> in new debt, followed by <\/span>another $50 million round<\/a>, months after <\/span>laying off<\/a> dozens of staff amid concerns about the company\u2019s financial health. In March, the company went public, raising about $775 million in its initial public offering.\u00a0<\/span><\/p>\n\n