Imperva says a recent data breach exposed email addresses, scrambled passwords, API keys and SSL certificates for a subset of its firewall users. Imperva sells technology and services designed to detect and block various types of malicious Web traffic. An attacker in possession of these key assets could use that access to significantly undermine the security of traffic flowing to and from a customers various Web sites. An analyst says such breaches at cloud-based firms often come down to small but ultimately significant security failures on the part of the provider.”]
Source: https://krebsonsecurity.com/2019/08/cybersecurity-firm-imperva-discloses-breach/