London property manager breach may have exposed bank details and lockbox codes
Summary
London-based property management company City Relay has suffered a data breach, with intruders accessing its Metabase Cloud instance twice. The attackers may have exfiltrated sensitive customer data, including bank details and lockbox codes.
IFF Assessment
FOE
This breach exposed sensitive customer financial and access information, posing a direct risk to individuals and increasing the likelihood of further fraud or unauthorized access.
Defender Context
This incident highlights the ongoing risk of data breaches targeting cloud-based business intelligence tools like Metabase. Defenders should ensure proper access controls, monitoring, and regular security audits are in place for such platforms to prevent unauthorized access and data exfiltration.