Jira Servers
NJCCIC Data Breach Notification
Original Release Date: 8/12/2019
Summary
A misconfiguration within Jira servers has publicly exposed internal sensitive information of several global organizations. Jira is a popular project management tool developed by Atlassian and is used by over 135,000 companies to track project tasks, details, and developments. The issue lies within the visibility options when creating new dashboards and filters. Some organizations include Google, Yahoo, NASA, United Nations, and CODIX –a financial software company used by various institutions and agencies within the European Union. This unintentional breach discloses valuable details that could provide research and development (R&D) information to rival companies or be used by threat actors to conduct future attacks. Further details regarding this breach can be found in the Medium article and the BleepingComputer article. Atlassian support provides application configuration instructions.
The NJCCIC is a component organization within the New Jersey Office of Homeland Security and Preparedness. We are the State's one-stop-shop for cyber threat analysis, incident reporting, and information sharing and are committed to making New Jersey more resilient to cyber threats by spreading awareness and promoting the adoption of best practices.
View our Privacy Policy here.
View our Site Index here.