Zoho Corporation controversies
Controversies tied to this brand in public sources. A listing is not a finding of fault.
Back to profile3 entries
2025
Security and encryption criticism
A reported SQL-injection vulnerability raised concerns about unauthorized database queries, while Arattai was criticized for not providing end-to-end encryption for chats.
2022
International Committee of the Red Cross compromise
The International Committee of the Red Cross reported that data relating to approximately 515,000 people had been compromised in an attack exploiting the ManageEngine vulnerability. The organization acknowledged that it had not applied a patch released by Zoho.
2021
ManageEngine ADSelfService Plus exploitation
Attackers exploited vulnerabilities in ManageEngine ADSelfService Plus. The incident became associated with later attacks against organizations that had not applied available security updates.