Dosu intrusion exploits authorisation flaw, exposing user information
On 2 November 2026, Dosu experienced a security incident in which an attacker exploited an authorisation validation flaw in organisation invitations to gain owner privileges in an internal organisation. The attacker used integration credentials and CI to access the production database and cloud environment, exposing usernames, email addresses, login-related information and indexed pages belonging to some customers. Dosu published a postmortem of the incident on 8 November.
Key facts
- Affected organisation
- Dosu
- Incident type
- Data breach
- Occurred / detected
- 2026-11-02
- Scale of damage
- Usernames, email addresses, login-related information and indexed pages belonging to some customers
- Cause / method
- Privilege escalation through an authorisation validation flaw in organisation invitations, followed by access to the production environment through integration credentials and CI
- Location
- Other countries
If your data was exposed
Exposed dataNameEmailUsername
- Change your password, and also change it on any other site where you use the same one. Turn on two-factor authentication if available.
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- An attacker exploited an authorisation validation flaw in organisation invitations to access the production database and cloud environment, exposing user information.
- Dosu published a postmortem detailing the attack path and the information exposed in the security incident.
1 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.