DigitalOcean Says Customer Billing Data 'Exposed' by a Security Flaw

DigitalOcean has emailed customers warning of a data breach involving customers' billing data, TechCrunch has learned. From the report: The cloud infrastructure giant told customers in an email on Wednesday, obtained by TechCrunch, that it has 'confirmed an unauthorized exposure of details associated with the billing profile on your DigitalOcean account.' The company said the person 'gained access to some of your billing account details through a flaw that has been fixed' over a two-week window between April 9 and April 22. The email said customer billing names and addresses were accessed, as well as the last four digits of the payment card, its expiry date, and the name of the card-issuing bank. The company said that customers' DigitalOcean accounts were 'not accessed,' and passwords and account tokens were 'not involved' in this breach. 'To be extra careful, we have implemented additional security monitoring on your account. We are expanding our security measures to reduce the likelihood of this kind of flaw occuring [sic] in the future,' the email said.

Read more of this story at Slashdot.