Thanksgiving 2023 security incident

[hpshelton]

---

layout: post type: link date: 2024-02-19 18:00:00 -0700 title: "Thanksgiving 2023 security incident" link: https://blog.cloudflare.com/thanksgiving-2023-security-incident permalink: /post/2024/02/19/cloudflare-breach categories:

• security
• cloudflare
• eviction
• respond

• incident

  Even though we believed, and later confirmed, the attacker had limited access, we undertook a comprehensive effort to rotate every production credential (more than 5,000 individual credentials), physically segment test and staging systems, performed forensic triages on 4,893 systems, reimaged and rebooted every machine in our global network including all the systems the threat actor accessed and all Atlassian products (Jira, Confluence, and Bitbucket).

  This should be considered the gold standard for the response to and write-up on a security incident.

[hpshelton]

post

[hpshelton]

https://github.com/hpshelton/hpshelton.github.io/commit/468d5a70db8a9770378356fc383a36b39f6f179b

[hpshelton]

Posted by https://github.com/hpshelton/hpshelton.github.io/actions/runs/8058326142
http://hpshelton.com/post/2024/02/19/cloudflare-breach