Four’N Twenty owner Patties Foods reportedly targeted in ‘data breach’
Patties Foods, the owner of popular servo pastry brand Four‘N Twenty, has been ‘targeted in a third-party data breach’.
Cybersecurity researcher Jeremiah Fowler reported discovering a non-password-protected database containing 524,000 documents belonging to the food service provider, including 25,000 invoices.
The exposed records allegedly contained a wealth of information, including vendors, contacts, email addresses, and banking information such as account numbers, invoice amounts, supplier numbers, supplier names, invoice numbers, invoice amounts, approval codes, and employee names.
Upon discovery, Fowler immediately sent a responsible disclosure notice to Provenio.ai – a service provider that provides AI-powered productivity for the supply chain back-office to many well-known Australian companies.
“Provenio acted fast and professionally to restrict access as soon as they were notified, and public access to both databases was restricted within hours,” he said.
He also reported receiving the following response: “I can confirm that your message has reached the relevant people, and we are taking this very seriously. Thank you for notifying us and thank you for confirming that you do not download or extract data. We have taken immediate action to rectify the issue as well as investigate how the exposure has happened. However, at this stage, it is possible that this may have happened due to human error resulting from a patch update.”
The database also alledgely included evidence of ransomware, a common and dangerous type of malware that permanently blocks access to personal data unless a ransom is paid.
Founded in 1966, Patties Foods also operates Leggo’s, Lean Cuisine, Nanna’s, Chefs Pride, and Herbert Adams.
Mumbrella has contacted Patties Foods for comment.
Subscribe to the daily newsletter
Damn, now the hackers will now which pies I like!
User ID not verified.
Have your say