City Relay, a London-based property manager, has disclosed that intruders accessed its Metabase Cloud instance twice and extracted customer data. The company says the stolen information may include bank details and lockbox codes, according to The Register.
Metabase Cloud is a hosted version of the open-source business intelligence tool, used for querying and visualising data. The disclosure does not explain how the attackers gained entry or how long the access lasted, but it confirms that customer data was taken.
The incident highlights the risk that cloud-hosted analytics services can become a target for data theft. For organisations running such platforms, the breach is a reminder that auxiliary compute infrastructure may hold highly sensitive records.