Menu
Browse

DAC Group

Primary URL Location Industry
www[.]dacgroup[.]com
Country Canada
Commercial Icon
Commercial
Profile

DAC Group is a digital marketing agency headquartered in Canada. The organization's operations and service portfolio are not detailed in the provided information, though a significant cybersecurity incident in 2016 provides specific insight into its data handling practices. On June 9, 2016, the company experienced a breach that resulted in the exposure of approximately 93,000 customer accounts. This incident notably included over 77,000 accounts belonging to a major financial services provider, indicating the agency's client base extends to large institutions within the financial sector. The compromised data comprised encrypted passwords, names, usernames, geolocation details, and role-related information. A critical aspect of this breach was the source of the data; it originated from a development server that contained production data, representing a acknowledged security mispractice where non-production systems were not properly isolated from live information.

Following the discovery of the incident, DAC Group confirmed the breach involved data from a non-production system and asserted that the agency only handles publicly available information. The company implemented enhanced security measures in response and notified affected clients. The attackers responsible for the breach were never identified. The leaked account data also contained email domains from multiple other organizations, suggesting the breach's impact potentially reached beyond the immediately identified financial services client. This event stands as a documented security failure for the agency, highlighting risks associated with improper data segregation in development environments. No further details regarding the organization's scale, specific market segments, ownership structure, or other distinguishing competencies are provided in the available source material. The profile is therefore limited to the confirmed facts surrounding this 2016 security incident and the company's stated position on its data handling practices.

Incidents
Linked incidents available to members
1 incident