CYBERSECURITYTRACKER
Permanent story citation

Tobacco company got smoked by leaving secret recipes on a file share

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 12484

As cited

Copy frozen at (site build).

breaches incidents

Tobacco company got smoked by leaving secret recipes on a file share

A penetration tester discovered unprotected file shares on a tobacco company's network containing confidential product recipe files with detailed chemical compositions, marked as confidential and not to be shared. Despite clear evidence of exposed trade secrets accessible to all employees via Windows file sharing protocol, the company's security team denied the files existed and refused to acknowledge the vulnerability even after a year of engagement.

Why it matters: Organizations across all industries should audit file share permissions and access controls; exposed recipe or formula files represent severe intellectual property risk, and defensive denial of findings prevents remediation and leaves critical data vulnerable.

VendorsMicrosoftTrend Micro
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary