Nitro Pdf Data Breach ((new)) -

Nitro PDF Data Breach (2020): A Deep Forensic Write-Up

1. Executive Summary

Incident: Unauthorized access and database exfiltration
Date Discovered: October 2020 (data put up for sale shortly after)
Platform: Nitro Productivity Suite (Nitro Pro, Nitro Sign, cloud services)
Impact: ~77 million user records (including email addresses, hashed passwords, user names, and system metadata)

IP Addresses: Technical data that can be used to track user locations and network patterns. nitro pdf data breach

Fortunately, Nitro stated that the documents themselves—the PDFs and signed contracts stored in the cloud—were not part of the primary database leak. However, the metadata surrounding those documents provided attackers with enough information to target specific employees at major firms. The Risks: Phishing and Identity Theft Nitro PDF Data Breach (2020): A Deep Forensic Write-Up 1

In September 2020, Nitro Software, Inc. suffered a massive data breach involving an unauthorized third party gaining access to its databases. While initially described by the company as a "low impact security incident", it was later revealed that the breach exposed over 77 million user records and roughly 1 terabyte of documents Breach Timeline September 28, 2020 : The actual breach occurs. October 21, 2020 While initially described by the company as a