London property manager breach may have exposed bank details and lockbox codes

A recent breach at City Relay, a London-based property manager, highlights the growing concern of data security in the property industry. The breach involved an intruder accessing City Relay's Metabase Cloud instance not once, but twice, extracting sensitive customer data in the process. This data includes bank details and lockbox codes, which could potentially be used for malicious activities such as financial theft or unauthorized access to properties.

The use of Metabase Cloud, a business intelligence and analytics platform, suggests that City Relay was leveraging cloud-based services to manage and analyze its data. However, this also introduces new risks, as cloud instances can be vulnerable to attacks if not properly secured. The fact that the intruder was able to access the instance twice implies a potential weakness in City Relay's security protocols or incident response plan. As the property industry increasingly relies on digital tools and cloud services, it's crucial for companies to prioritize data security and implement robust measures to protect sensitive information.

As the industry watches, the key takeaway from this breach is the importance of securing cloud-based services and protecting sensitive data. Companies should be scrutinizing their own security protocols and ensuring that they have adequate measures in place to prevent similar breaches. The next thing to watch is how City Relay responds to this breach and what steps it takes to prevent future incidents. Additionally, the Metabase community may need to reassess its security features and provide guidance to users on how to secure their instances.

Originally reported by theregister.com. CodeNews adds analysis for ai & agent economy readers.