Gowid security incident history
Hacking, data breaches and other security incidents involving Gowid, with related coverage.
Gowid hack exposes client data and triggers fraudulent corporate card charges
Impact: 656 client companies affected; contacts' personal information, billing information, partial card numbers, and bank account information exposed; no actual financial losses
Gowid's Google Workspace subscription billing and payment functionality was compromised, exposing client contacts' personal information, billing information, partially masked card numbers, and bank account information belonging to some subscribers. The attacker exploited an API without authentication to take over an administrator account and create fraudulent invoices in an attempt to charge corporate cards, affecting 656 client companies. Approved payments resulted in no actual financial losses thanks to suspicious transaction blocking and full reversals, and Gowid reported the security incident and investigated the attack path.
Related reports: 15 · last report →