On December 16, 2023, MongoDB, Inc. confirmed that it was the recent victim of what appears to be a cyberattack. In this notice, MongoDB explains that the incident resulted in an unauthorized party being able to access consumers’ sensitive information, which includes their metadata and contact information; however, the company’s investigation is ongoing. Upon completing its investigation, MongoDB will be required under federal law to notify any individuals whose confidential information was affected by the recent data security incident.
If you receive a data breach notification from MongoDB, Inc., it is essential you understand what is at risk and what you can do about it. While the MongoDB investigation is not yet complete, the company has confirmed that hackers were able to access customer data, which may expose affected customers to an increased risk of identity theft. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft, as well as discuss your legal options following the MongoDB data breach. For more information, please see our recent piece on the topic here.
What Caused the MongoDB Cyberattack?
The MongoDB cyberattack was only recently announced, and more information is expected in the near future. However, MongoDB’s website notices provide some important information on what led up to the breach. According to this source, on December 13, 2023, MongoDB detected suspicious activity within its corporate network. In response, MongoDB informed law enforcement and began working with an outside forensics firm to assist with the company’s investigation.
Thus far, MongoDB has determined that an unauthorized actor was able to gain access to the company’s corporate network “for some period of time before discovery,” although an exact date was not provided. However, MongoDB notes that there is “no evidence of unauthorized access to MongoDB Atlas clusters,” and the company has “not identified any security vulnerability in any MongoDB product.”
On December 17, 2023, MongoDB posted an update, explaining it is aware of unauthorized access to some corporate systems that contain customer names, phone numbers, and email addresses, among other customer account metadata. If MongoDB confirms confidential information was leaked, it will be required to send data breach letters to anyone who was affected by the recent data security incident. These letters should provide victims with a list of what information belonging to them was compromised.
More Information About MongoDB, Inc.
Founded in 2007, MongoDB, Inc. is a software company based out of New York City, New York. MongoDB created a database platform called “Atlas” that is used by millions of people worldwide, making it the most widely used database platform in the world. MongoDB is publicly traded on the NASDAQ under the symbol “MDB.” MongoDB employs more than 4,626 people and generates approximately $1.5 billion in annual revenue.
