The breach was orchestrated by the notorious threat actor group ShinyHunters
The breach was severe, the response was adequate but late, and the long-term risk for affected users remains medium-to-high—primarily from phishing and credential stuffing attacks. nitro pdf data breach
Nitro Software utilized Amazon S3 buckets to store user data and sync documents. Security researchers believe a bucket containing a 20GB backup database was inadvertently left open to the public internet without requiring authentication. This bucket was not encrypted at rest. The breach was orchestrated by the notorious threat
You’re likely affected if you:
Understanding the timeline helps distinguish fact from the rumors that circulated on dark web forums. the response was adequate but late
If you have ever used Nitro PDF (Nitro Pro, Nitro Cloud, or Nitro Sign), you are potentially affected. Specifically: