There shouldn't be any coming back from this. There are failures on multiple levels here & CircleCI demonstrated no one should keep any sensitive data with them.
> Zuber said that while customer data was encrypted, the cybercriminals also obtained the encryption keys able to decrypt customer data.
...what? why did this engineer have access to everything? Does CircleCI know what minimum access policies are for?
> Zuber said that while customer data was encrypted, the cybercriminals also obtained the encryption keys able to decrypt customer data.
...what? why did this engineer have access to everything? Does CircleCI know what minimum access policies are for?