A recent data breach involving the ServiceBridge platform, used for field service management, has exposed sensitive data belonging to millions of customers and businesses. Security researcher Jeremiah Fowler discovered that nearly 32 million files were left unprotected and accessible to the public. 

The compromised data includes contracts, invoices, agreements, and other documents dating back to 2012, affecting companies across Canada, Europe, the U.S., and the U.K. The files, which were accessible without any security measures, were vulnerable to unauthorized access for an unknown duration. 

The breach affected a wide range of industries, including commercial services, pest control, cleaning, construction, and more. Documents reviewed by Fowler indicated a diverse customer base, ranging from private homeowners to well-known chain restaurants, Las Vegas casinos, and healthcare providers. 

The exposed data includes personal information such as full names, addresses, partial credit card numbers, phone numbers, and even Health Insurance Portability and Accountability Act (HIPAA) consent forms. Some of the documents, labelled “site audit reports,” contained photographs of business interiors and exteriors, along with sensitive access details like gate codes. 

This breach presents significant risks, including the potential for fraud and spear phishing attacks. The leaked data, intended to remain confidential between customers and businesses, could be exploited by cybercriminals. Fowler has urged businesses and customers alike to take immediate precautions. He advises maintaining accurate records of vendors, contractors, and customers to verify payment requests. In cases of suspicion, Fowler recommends withholding payments until the information can be confirmed. 

He also stresses the importance of vigilance when dealing with unexpected payment requests or additional information requests from previously engaged businesses. As data breaches become increasingly frequent, Fowler emphasizes the need for strong identity theft protection services to mitigate potential threats.