CloudSEK

CloudSEK is a cybersecurity firm headquartered in India. The company provides security services that include threat intelligence and dark web monitoring, as evidenced by its involvement in an incident where it attributed the breach to another dark web monitoring entity. In November 2022, an employee's session cookies were stolen via Vidar Stealer malware that had been installed during third‑party laptop servicing. This compromise allowed attackers to gain unauthorized access to the firm's Jira and Confluence collaboration platforms. The intruders exfiltrated internal documents, training materials, screenshots of product dashboards, and purchase‑order information linked to three customers.

The firm’s headquarters are located in India, placing it within a growing hub for cybersecurity innovation in the region. Although the public sources do not disclose specific employee counts, revenue figures, or global office footprint, the incident description indicates that CloudSEK operates internal collaboration suites such as Jira and Confluence for product development and internal communication. The breach did not affect databases, customer login credentials, or critical systems, suggesting that the company segregates sensitive data from its collaboration environments. Following the attack, CloudSEK reported that it revised access controls and conducted vulnerability assessments of the affected platforms. No public information indicates that CloudSEK is a subsidiary of another organization or that it owns any subsidiaries.

The incident highlighted CloudSEK’s focus on dark web monitoring, as the company pointed to another dark web monitoring cybersecurity entity based on the observed attack patterns. This suggests that the firm possesses capabilities to track illicit activity on hidden services and to attribute threats to specific actors. The post‑incident response included implementing stronger session‑management practices and reinforcing multi‑factor authentication despite the fact that the compromised account already had MFA enabled. These actions demonstrate the company’s commitment to improving its own security posture after a real‑world breach. CloudSEK continues to operate as an independent cybersecurity provider, with its headquarters remaining in India.