Skip to content
WorldBrand.AI

Imperva controversies

Controversies tied to this brand in public sources. A listing is not a finding of fault.

Back to profile2 entries

  1. 2019

    Incapsula security incident

    Imperva notified customers that it had learned of a security incident affecting some Incapsula users and exposing sensitive information. The disclosure concerned the security of Imperva’s own service environment and became a significant event in the company’s corporate history.

    Source

  2. 2019

    Imperva publishes post-mortem on customer data breach

    Issue disclosure

    Imperva published a post-mortem describing a security breach in which a hacker used a stolen AWS API key to access its cloud infrastructure and download a customer database snapshot. The company said customers who had signed up before September 15, 2017, were affected.

    Source excerpt

    • Cyber-security firm Imperva published today a detailed post-mortem report of a security breach the company disclosed two months ago, in August.
    • The company blamed the security breach on an Amazon Web Services (AWS) API key a hacker stole from an internal system that was left accessible from the internet.
    • However, the company said that sometime in October 2018, the intruder began downloading a copy of the database snapshot they uploaded on the AWS RDS account.
    Source