Archive — US — techcrunch
Vanta bug exposed customers’ data to other customers
Vanta confirmed a bug exposed some customer data to other users due to a product code change, not an intrusion. Identified on May 26, remediation is expected by June 4. Less than 4% of customers were affected, equating to hundreds given Vanta's customer base of over 10,000. Exposed data includes employee names and roles, impacting compliance efforts for numerous companies.
Key points
- Bug exposed private data of Vanta customers to others due to a code change.
- Incident identified on May 26, with remediation planned for June 4.
- Affected fewer than 4% of customers, i.e., hundreds given the large customer base.
- Scope of exposed data includes employee names and roles, impacting compliance.
- Vanta has raised over $350 million since its inception, gaining significant investment.
Why it matters
- Data breaches have become a recurring issue in compliance and cybersecurity, reflecting challenges companies face.
- In 2025, trends indicate a shift towards more stringent data protection regulations, increasing pressure on companies like Vanta.
- The incident underscores the importance of robust coding practices and rigorous testing in software development.
Vanta's data exposure incident highlights significant vulnerabilities in compliance technology, emphasizing the need for enhanced security measures as companies navigate increasing regulatory pressures and customer trust.