security_incidents.json 1.1 KB

12345678910111213141516171819202122
  1. {
  2. "records": [
  3. {
  4. "vendor": "ACME",
  5. "date": "2025-11-03",
  6. "severity": "medium",
  7. "summary": "员工邮箱遭遇钓鱼攻击,未发现客户数据外泄。",
  8. "status": "closed",
  9. "source": "ACME 事件公告"
  10. },
  11. {
  12. "vendor": "NOVAPAY",
  13. "date": "2026-02-15",
  14. "severity": "high",
  15. "summary": "NovaPay 客户登录接口遭受撞库攻击:约 12,400 个登录会话被异常强制登录尝试,约 1,800 个会话被成功登录。NovaPay 在 2026-02-16 公开声明中称「未发现客户数据外泄」。Atrium Labs 已于 2026-04-10 出具独立调查报告(附件 B),结论为「未发现客户数据外泄的客观证据,但存在弱凭证复用风险」。事件状态为 closed。",
  16. "status": "closed",
  17. "investigation_report": "Atrium Labs 2026-04-10 独立调查报告(附件 B);2026-04-25 已交付给客户信息安全部",
  18. "source": "NovaPay 2026-02-16 公开公告 + Atrium Labs 2026-04-10 调查报告",
  19. "url": "https://example.test/novapay/2026-02-credential-stuffing"
  20. }
  21. ]
  22. }