URGENT – UBIQUITI: This bulletin is for anyone that has Ubiquiti (UniFi) gear in their business.

A recent breach of Ubiquiti (UniFi Series of products) credentials back in January has been called catastrophic by a whistleblower. In a letter written to European regulators, the whistleblower wrote:

“It was catastrophically worse than reported, and legal silenced and overruled efforts to decisively protect customers. The breach was massive, customer data was at risk, access to customers’ devices deployed in corporations and homes around the world was at risk.”

According to the alleged responder, cybercriminals gained administrative access to AWS Ubiquiti databases via credentials stored and stolen from an employee’s LastPass account, permitting them to obtain root admin access to AWS accounts, S3 buckets, application logs, secrets for SSO cookies, and all databases, including those containing user credentials. 

If you have not heard from your current provider, Fusion IT is prepared to work with you to remedy your system.

If you would like some basic business education on the various aspects of cyber security including EDR, Dark Web, MFA and SOC/SIEM go to https://fusion-it.net/events to sign up. (If you don’t know what these terms are you might want to attend a couple of our webinars)

If you have any questions or concerns, please contact our support desk at 616-855-4590 or you can book a 10 minute discovery call with us to find out more.

Read more about this threat here: Ubiquity Breach

For additional security bulletins go to https://fusion-it.net/security-bulletin/

Thank you!

Fusion IT, LLC