Incident Types: The types of cybersecurity incidents that have occurred include Data Leak and Breach.

Detection and Response: The company detects and responds to cybersecurity incidents through an third party assistance with experian (credit monitoring), and containment measures with service taken offline within 17 minutes of discovery, and remediation measures with bug fix deployed, remediation measures with system restoration, and recovery measures with full service restoration by 2023-10-29 09:00 utc, and communication strategy with email notifications to affected customers, communication strategy with public statement, communication strategy with apology issued, communication strategy with offer of 1 year free experian credit monitoring..

Common Attack Types: The most common types of attacks the company has faced is Data Leak.

Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Names, Addresses, E-Mail Addresses, Bank Details, Date Of Birth, , Personally Identifiable Information (Pii) and .

Third-Party Assistance: The company involves third-party assistance in incident response through Experian (credit monitoring), .

Prevention of Data Exfiltration: The company takes the following measures to prevent data exfiltration: Bug fix deployed, System restoration, .

Handling of PII Incidents: The company handles incidents involving personally identifiable information (PII) through by service taken offline within 17 minutes of discovery and .

Data Recovery from Ransomware: The company recovers data encrypted by ransomware through Full service restoration by 2023-10-29 09:00 UTC, .

Key Lessons Learned: The key lessons learned from past incidents are Importance of rigorous testing for session/caching mechanisms in customer-facing applications; need for rapid incident response to minimize exposure duration.

Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: The Register.

Communication of Investigation Status: The company communicates the status of incident investigations to stakeholders through Email Notifications To Affected Customers, Public Statement, Apology Issued and Offer Of 1 Year Free Experian Credit Monitoring.

Advisories Provided: The company provides the following advisories to stakeholders and customers following an incident: were Public statement and email notifications to affected customers. and Emails sent to affected users with details of the incident and offer of free credit monitoring..

Post-Incident Analysis Process: The company's process for conducting post-incident analysis is described as Experian (Credit Monitoring), .

Corrective Actions Taken: The company has taken the following corrective actions based on post-incident analysis: Bug Fix Deployed To Resolve The Data Exposure Issue., Enhanced Monitoring And Testing Protocols Implemented (Implied By Statement On Preventing Future Incidents)., .

Last Attacking Group: The attacking group in the last incident was an Hackers.

Most Recent Incident Detected: The most recent incident detected was on 2023-10-27.

Most Recent Incident Publicly Disclosed: The most recent incident publicly disclosed was on 2023-10-27.

Most Recent Incident Resolved: The most recent incident resolved was on 2023-10-29T09:00:00Z.

Most Significant Data Compromised: The most significant data compromised in an incident were Names, Addresses, E-mail addresses, Bank details, Date of birth, , names, addresses, email addresses, dates of birth and .

Most Significant System Affected: The most significant system affected in an incident was Customer portal/web application.

Third-Party Assistance in Most Recent Incident: The third-party assistance involved in the most recent incident was experian (credit monitoring), .

Containment Measures in Most Recent Incident: The containment measures taken in the most recent incident was Service taken offline within 17 minutes of discovery.

Most Sensitive Data Compromised: The most sensitive data compromised in a breach were Bank details, addresses, names, Names, email addresses, Date of birth, E-mail addresses, Addresses and dates of birth.

Number of Records Exposed in Most Significant Breach: The number of records exposed in the most significant breach was 5.3K.

Most Significant Lesson Learned: The most significant lesson learned from past incidents was Importance of rigorous testing for session/caching mechanisms in customer-facing applications; need for rapid incident response to minimize exposure duration.

Most Significant Recommendation Implemented: The most significant recommendation implemented to improve cybersecurity was Regularly review and test incident response plans to ensure swift containment., Enhance logging and monitoring to detect anomalous data access patterns in real-time., Implement multi-layered access controls to prevent unauthorized data exposure., Conduct a thorough security audit of the customer portal and particularly session management and data retrieval logic..

Most Recent Source: The most recent source of information about an incident is The Register.

Current Status of Most Recent Investigation: The current status of the most recent investigation is Completed (root cause identified as technical error; no external attack).

Most Recent Stakeholder Advisory: The most recent stakeholder advisory issued was Public statement and email notifications to affected customers., .

Most Recent Customer Advisory: The most recent customer advisory issued was an Emails sent to affected users with details of the incident and offer of free credit monitoring.