Everbridge has revealed they were a victim of a data breach
The attack was detected on May 21, and the attackers got in using info collected from previous phishing attacks. The attackers were able to access files on their corporate network, including customer info. Everbridge has hired external cybersecurity experts to help investigate.
Everbridge will enforce MFA on June 3, 2024 to strengthen their security.
Everbridge, an American software company focused on crisis management and public warning solutions, notified customers that unknown attackers had accessed files containing business and user data in a recent corporate systems breach.
Well no surprise there…
EverBridge announces some kind of data breach on corporate network at 9:28pm CST 5/24 - the Friday of the holiday weekend.
Just a few days before they sent an out of the blue “We are forcing MFA on all non-SSO accounts on June 3rd” message that gave everyone 10 days lead time, also over the same holiday weekend, and attributed the change to increased phishing attempts.
Source of the breach? A phishing email.