Computing London Property Manager Breach Exposes Sensitive Customer Data
Article Content
- •City Relay's Metabase Cloud instance was breached, exposing sensitive customer data.
- •The breach may have compromised financial information, including bank account details.
- •City Relay notified customers six days after discovering the intrusion.
City Relay, a London property management company, reported a breach of its Metabase Cloud instance, where attackers accessed sensitive customer data twice due to an unknown vulnerability. The compromised data includes personal information such as names, email addresses, and financial details like bank account numbers and access codes for properties. City Relay became aware of the intrusion on September 8 and notified affected customers on September 14, advising them to monitor their accounts for unusual activity. The breach raises concerns about the physical security of the properties managed by City Relay, as access codes and key storage information may have been exposed. The company has not disclosed the number of affected customers or how attackers exploited the system. Security experts emphasize that the impact of such a breach depends on the data linked to the Metabase platform. City Relay has taken precautionary measures to secure access and key storage codes.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Conti and City Relay in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Ransomware Groups Exploit PAN-OS Flaw, Target Critical Infrastructure Ransomware groups, including Qilin and INC, are exploiting a critical authentication bypass vulnerability (CVE-2026-0257) in Palo Alto Networks' PAN-OS GlobalProtect and Prisma Access. This flaw allows attackers to establish unauthorized VPN sessions, bypassing multifactor authentication controls. Since its disclosure…
Volt Typhoon's Silent Train Network Targets US Critical Infrastructure The Chinese state-sponsored hacking group Volt Typhoon has been linked to a covert network called Silent Train, which has exploited at least four zero-day vulnerabilities over three years. This network utilizes rapidly rotating chains of compromised SOHO routers, IoT devices, and enterprise infrastructure to access…