VirusTotal has suffered a data leak. The popular online service was launched in 2004 and is used to analyse suspicious files and URLs to detect malicious content or malware. The data leak involved a database with 5,600 registered customers names and email addresses. The leaked data include accounts linked to official US bodies such as the Cyber Command, Department of Justice, the Federal Bureau of Investigation (FBI) and the National Security Agency (NSA). There are also accounts belonging to government agencies in other countries like Germany, Netherlands, Taiwan and the UK. The data leaks occurred after an employee inadvertently uploaded the information to the malware scanning platform. VirusTotal said they removed the list from the platform within an hour of its posting, and are reviewing their internal processes and technical controls.
https://thehackernews.com/2023/07/virustotal-data-leak-exposes-some.html
https://www.darkreading.com/attacks-breaches/virustotal-data-leak-affects-5k-users
This segment was created for the It’s 5:05 podcast