Data analytics company Sisense is responding to a cybersecurity incident that may have exposed the information of some of the world’s largest companies.
The main American cybersecurity agency issued a warning Thursday morning about an attack on Sisense, which provides AI data analysis services to organizations including Philips Healthcare, Verizon, Nasdaq, Air Canada and hundreds of others. It helps businesses collect, analyze and visualize data from different sources.
The Cybersecurity and Infrastructure Security Agency (CISA) said it is “working with private sector partners to respond to a recent compromise discovered by independent security researchers impacting Sisense, a company that provides data analysis services”.
The agency urged all Sisense customers to reset credentials and data “potentially exposed or used to access Sisense services,” while investigating and reporting “any suspicious activity” involving credentials exposed to CISA.
“CISA is taking an active role in working with private sector partners to respond to this incident, particularly with respect to impacted critical infrastructure sector organizations,” the agency said.
A Sisense spokesperson declined to answer several questions about the incident. Reports of problems emerged Wednesday evening, when cybersecurity journalist Brian Krebs published an internal memo from Sisense’s chief information security officer that said the company was aware of company information being leaked to a “restricted access server.”
The company opened an investigation but warned its customers to alternate the credentials used with their Sisense app.
Several other cybersecurity experts said a malicious actor broke into the company’s systems and exfiltrated troves of data.
Future saved
Intelligence cloud.