ZScaler Details

    Organization Logo

    ZScaler

    San Jose, CA • 6000 employees • Technology and cloud computing

    Industry

    Technology and cloud computing

    Security Incidents

    1

    Zscaler is a leading cybersecurity company that provides cloud-based security solutions designed to secure user access across various devices and locations. The company's flagship services, Zscaler Internet Access and Zscaler Private Access, create secure connections between users and applications, bypassing traditional network security infrastructure to reduce latency and enhance security. Leveraging a global cloud platform, Zscaler focuses on transforming network security with comprehensive and integrated services, including threat prevention, sandboxing, SSL inspection, and data protection.

    Security Incidents

    ZScaler Breach of May 2024
    Severity Score
    Moderate

    Type

    Unknown

    Summary

    In May 2024, Zscaler quickly initiated an investigation following a public offering by a hacker known as IntelBroker, who claimed to be selling access to the company's systems on a cybercrime forum. The hacker advertised selling "confidential and highly critical logs packed with credentials," but Zscaler's swift response confirmed that only a disconnected and isolated test environment on a non-Zscaler server was compromised, with no customer or sensitive data involved. Despite alarming claims, Zscaler assured that its main customer, production, and corporate environments remained secure and un...
    Show more

    Severity

    The breach at Zscaler was relatively contained and not severe, as it only involved an isolated test environment that was not linked to the company's main infrastructure and contained no customer data. There was no evidence that the main customer, production, or corporate environments were compromised. The swift identification and isolation of the issue helped prevent any significant damage or data loss.

    Impact

    The impact of the breach on Zscaler was minimal, as it only affected an isolated test environment that was not connected to any of the company’s main systems and did not contain any customer data. No customers, production operations, or corporate functions were compromised or affected by the incident. The breach did not result in any significant data loss or operational disruption for Zscaler or its clients.

    KEEP YOUR ENVIRONMENT SECURE

    Weak credentials are the leading cause of breaches. Beyond Identity can help.

    See MFA exploits in action
    Watch how adversaries exploit companies in quick videos