Zendesk clocks 10,000 accounts accessed by miscreants before November 2016

Zendesk has admitted to suffering a data snafu – but while it affects 10,000 customers, it only applies to those who were using the firm's helpdesk products before 1 November 2016. In an email to all its customers, seen by The Register, Zendesk coughed to the breach. "We recently became aware of a security matter that may …

[steviebuk]

-Snigger-

A certain NHS trust was using this last time I knew. Despite us saying years ago it was a bit shit. Anything to stop us visiting actual users in person was the real reason they wanted it used.

[Anonymous Coward]

Re: -Snigger-

Why would anyone want to visit actual users in person?

[Anonymous Coward]

Your data given new life!

Someone sold on decommissioned disks without wiping them first?

[Anonymous Coward]

not a secure website...

they lost peoples private TLS keys and then proceed to have a website that has :

No DNSSEC - its 2019 and yes acking dns is a thing

No IPv6 - 464xlat needed to access from a mobile device.

No SRI or complete CSP - no signing external resources I mean no one outside would include any problems in their javascript

easy to fix yet not done for some reason ?