Simple.biz, a web development agency, has allegedly been compromised, resulting in the exposure of data and infrastructure access belonging to over 250 of its United States business clients. The breach reportedly impacts live client environments, exposing sensitive information from various businesses, including healthcare providers and e-commerce sites, which is currently being advertised for sale on a cybercrime forum.
The allegedly compromised data includes:
-
Full personally identifiable information (PII) of 250 business owners (names, addresses, phone numbers, emails, ages)
-
Family cluster details (parents, siblings, spouses)
-
6,700 phone numbers
-
3,500 email addresses
-
750 IP addresses
-
200 server credentials (cPanel, AWS, DigitalOcean, WP Engine)
-
50 source code repositories
-
Over 10,000 customer records from client e-commerce sites
-
Patient records including dates of birth and insurance details
