Rollbar security notice

What to do

• Check whether your product depends on DatoCMS. Check your stack

  Paste a package.json, lockfile, Terraform or a list of domains at down.guide/stack to see every provider you depend on.

• Confirm your retries, queues and scheduled jobs caught up after the 0m it lasted.

  Anything that failed between 2023-09-18 09:54 UTC and 2023-09-18 09:54 UTC may need a replay.

• Subscribe to DatoCMS's feed to hear about the next one first. RSS feed

  https://down.guide/feed?provider=datocms works in Slack (/feed subscribe), Discord feed bots and any RSS reader.

Updates from DatoCMS 1

1. resolvedSep 18, 2023, 9:54 AM UTC

   Resolved — On September 8th Rollbar announced a security incident. Rollbar is our error monitoring tool, where we send stacktraces of errors collected on frontend and backend systems. All the details of the incident here: https://rollbar.com/compliance/nob_sep7th/ In brief, our Rollbar access tokens might have been accessed by a third party, but Rollbar has no evidence of this happening. This means that our traces could have been read by someone else. In our implementation, before sending the traces to Rollbar we strip any personal information that might be present or any access token to DatoCMS projects. Apart from the posted data in the traces nothing else could have been exposed to third parties. In any case, on Sep 12th we have rotated all our tokens and deleted all the stack traces that were present in Rollbar. To this day we don't have any evidence that any of our data was accessed by a malicious third party.

   provider

Corrections

None so far.

Something wrong on this page? Report an error or send us a note. Every fix is listed here.