E-Tugra: Incident Report (Security Issues)

E-Tugra reported a security incident involving unauthorized access to an internal application that was mistakenly made publicly accessible. The incident was identified on November 13, 2022, and involved the potential exposure of sensitive information, including password reset emails. E-Tugra took immediate action to secure the application and conducted a thorough investigation, confirming that no certificates were affected and that domain validation processes were managed by SSL.com. The company has since implemented remediation measures and is undergoing penetration testing to enhance security. The incident raised concerns about the separation of systems and the potential for unauthorized access to customer accounts.

1. 2022-11-13 Incident identified by security researcher.
2. 2022-11-18 Incident report published on Bugzilla.
3. 2023-01-10 Penetration testing initiated.
4. 2023-04-02 Penetration testing completed.