HackerOne breach lets outside hacker read customers’ private bug reports

[erek]

"For HackerOne’s part, Loden said that the resolution and detailed disclosure of the unauthorized access—a practice he said is standard for every security event affecting the company—is proof of HackerOne’s commitment to protecting its customers' secrets.

“Security incidents will always exist, and the way a company responds can be more telling than the vulnerability itself,” he wrote. “We aim to show the community and our customers through our actions the steps we are actively taking to enhance our security.”"

https://arstechnica.com/information...de-hacker-read-customers-private-bug-reports/