CircleCI says hackers stole encryption keys and customers’ source code
There shouldn't be any coming back from this. There are failures on multiple levels here & CircleCI demonstrated no one should keep any sensitive data with them.<p>> Zuber said that while customer data was encrypted, the cybercriminals also obtained the encryption keys able to decrypt customer data.<p>...what? why did this engineer have access to <i>everything</i>? Does CircleCI know what minimum access policies are for?