Portraitbox: Data Theft via Insecure API (heise.de)

• Insecure API led to data theft at Portraitbox.
• Thousands of photographers and clients affected.
• Attackers deleted data after exfiltration.

"German photo provider Portraitbox suffered a security breach where attackers exploited a poorly secured API to steal data from thousands of photographers and their clients. The data was deleted after exfiltration. The company confirmed the incident but has not disclosed the extent or type of data compromised. Investigations are ongoing."