Cybersecurity Firm Imperva Exposes Customer Data

On August 27, 2019, cybersecurity firm Imperva disclosed on their official blog a security issue that has resulted on exposure of customer data. This impacts customer of Imperva's "Cloud Web Application Firewall" (Cloud WAF), who had accounts as of September 15, 2017. Exposed information includes email addresses and hashed passwords for some cases, while other cases include API keys and customer SSL certificates. These certificates and API keys could allow attackers to break an affected organization's encryption and intercept content sent to their web application.

Recommendations

Change passwords related to Cloud WAF
Enable two-factor authentication and reset API keys
Work with your ZeroFOX Account Manager and Platform Specialists to identify compromised credentials

Details

Imperva was notified on August 20 about the data exposure from a third party. Imperva claims that this exposure impacts only customers who had accounts through September 17, 2017, specifically, customers using the Incapsula service, the Cloud Web Application Firewall (CloudWAF). With access to the exposed data, an attacker could reduce Incapsula security settings or expose device traffic.