A manufacturing firm discovered through Digital Shadows SearchLight that a third party contractor had exposed sensitive Non Disclosure Agreements signed by its customers online. Digital Shadows analysts investigated and found pricing, costing, terms and conditions, and legal data was visible. The firm then rapidly notified the contractor to remove the information and modified its own data handling policies based on Digital Shadows' recommendations.

1. Use Case
Contractor Exposed Manufacturer’s Sensitive Data
www.digitalshadows.com
With Digital Shadows SearchLight™, a manufacturing frm discovered
that a third party contractor exposed sensitive Non Disclosure
Agreements signed by its customers via NAS (network addressed
storage). Threat actors may use an organization’s supply chain
to gain access to valuable systems and data such as intellectual
property and patents. The manufacturer is a long-standing Digital
Shadows client who engaged with us to proactively manage their
digital assets and third party risks.
U.S. Headquarters
Digital Shadows, Inc.
332 Pine Street, Suite 600
San Francisco, CA 94104
North American Intelligence Operations Hub
5307 E. Mockingbird Ln.
Suite 915
Dallas, TX 75206
UK Headquarters
Digital Shadows, Ltd.
Level 39
One Canada Square
London E14 5AB
Overview
With Digital Shadows SearchLightTM
, a manufacturing firm discovered
that a third party contractor exposed sensitive Non Disclosure Agreements
signed by its customers via NAS (network addressed storage). Threat
actors may use an organization’s supply chain to gain access to valuable
systems and data such as intellectual property and patents. The
manufacturer is a long-standing Digital Shadows client who engaged
with us to proactively manage their digital assets and third party risks.
Contractor Exposed Manufacturer’s
Sensitive Data
Digital Shadows SearchLightTM
How We Mitigated the Risk
Risk Detected
Digital Shadows SearchLightTM
uncovered the Non Disclosure Agreement (NDA)
information by monitoring for online mentions of the manufacturing firm’s company
name, project names and third party contractors. Our intelligence team launched an
investigation the same day to assess whether the NDA data was valid and related to
the manufacturing firm as it appeared.
Analyst Reviews and Adds Context
Digital Shadows analysts investigated the NDA data and uncovered that special pricing,
costing, terms and conditions and legal data was visible online. Although the data was
unintentionally exposed by the contractor, we alerted the manufacturer and provided
context and recommendations for thorough mitigation.
Risk Managed
Armed with this context, the manufacturing firm rapidly notified the third party
contractor to remove the sensitive NDA information from public access in their
network addressed storage. Based on recommendations from Digital Shadows, the
manufacturer also modified its policies and procedures for secure data handling.
Third Party Exposure Use Case
Manufacturing Industry
About Digital Shadows
www.digitalshadows.com
info@digitalshadows.com
+1-888-889-4143 | +44 203 393 7001
J17
About Digital Shadows
Digital Shadows enables organizations to manage digital risk by identifying and eliminating threats to their business
and brand. We monitor for digital risk across the broadest range of data sources within the open, deep and dark web
to deliver tailored threat intelligence, context and actionable remediation options that enable security teams to be
more effective and efficient. Our clients can focus on growing their core business knowing that they are protected if
their data is exposed, employees and third parties put them at risk, or their brand is being misused. To learn more,
visit www.digitalshadows.com.
Email: info@digitalshadows.com
U.S. Headquarters
Widest Collection of Sources
SearchLight monitors for data exposure across the widest
range of sources, within the open, deep and dark web.
No stone is left unturned.
Tailored and Targeted Collection
A register of key assets that uniquely define your organization
and your subsidiaries drives our intelligence machinery.
Why Digital Shadows Get Started
For more information on
Digital Shadows SearchLightTM
and
how we can help protect your
organization from Data Exposure,
please contact us
Visit www.digitalshadows.com
for more information
Call us at US 1-800-889-4143
UK +44 (0)203 393 7001
Email info@digitalshadows.com
Analyst
Added Context
Digital Shadows
intelligence analysts
investigate and add
context, impact and
recommended action.
Asset Registration
Organizations register
their company assets
with Digital Shadows,
including code samples,
document markings and
email footers.
Explore View
Organizations can view
the credential exposure
at a strategic level,
identifying trends over
time.
Mitigation Options
Each incident comes with a severity level and mitigation
options. We also offer Managed Takedown Service, which
provides end-to-end management for shutting down
malicious activity and offloading this time consuming task
from your team.
About Digital Shadows Digital Shadows monitors and manages digital risk across the widest range of data sources
within the open, deep and dark web to protect an organization’s business, brand and
reputation. The Digital Shadows SearchLightTM
service combines scalable data analytics with
intelligence analysts to manage and mitigate risks of an organization’s cyber threat, data
exposure, brand exposure, VIP exposure, infrastructure exposure, physical threat, and third
party risk, and create an up-to-the-minute view of an organization’s digital risk with tailored
threat intelligence. The company is jointly headquartered in London and San Francisco.
For more information, visit www.digitalshadows.com.
Data Exposure Example
Call us at 1-888-889-4143
UK +44 (0)203 393 7001
U.S. Headquarters
Digital Shadows, Inc. North American Intelligence Operations Hub
UK Headquarters
Widest Collection of Sources
SearchLight monitors for data exposure across the widest
range of sources, within the open, deep and dark web.
No stone is left unturned.
Tailored and Targeted Collection
A register of key assets that uniquely define your organization
and your subsidiaries drives our intelligence machinery.
Why Digital Shadows Get Started
For more information on
Digital Shadows SearchLightTM
and
how we can help protect your
organization from Data Exposure,
please contact us
Visit www.digitalshadows.com
for more information
Call us at US 1-800-889-4143
UK +44 (0)203 393 7001
Email info@digitalshadows.com
Analyst
Added Context
Digital Shadows
intelligence analysts
investigate and add
context, impact and
recommended action.
Asset Registration
Organizations register
their company assets
with Digital Shadows,
including code samples,
document markings and
email footers.
Explore View
Organizations can view
the credential exposure
at a strategic level,
identifying trends over
time.
Mitigation Options
Each incident comes with a severity level and mitigation
options. We also offer Managed Takedown Service, which
provides end-to-end management for shutting down
malicious activity and offloading this time consuming task
from your team.
About Digital Shadows Digital Shadows monitors and manages digital risk across the widest range of data sources
within the open, deep and dark web to protect an organization’s business, brand and
reputation. The Digital Shadows SearchLightTM
service combines scalable data analytics with
intelligence analysts to manage and mitigate risks of an organization’s cyber threat, data
exposure, brand exposure, VIP exposure, infrastructure exposure, physical threat, and third
party risk, and create an up-to-the-minute view of an organization’s digital risk with tailored
threat intelligence. The company is jointly headquartered in London and San Francisco.
For more information, visit www.digitalshadows.com.
Data Exposure Example
www.digitalshadows.com
U.S. Headquarters
Digital Shadows, Inc.
332 Pine Street, Suite 600
San Francisco, CA 94104
North American Intelligence Operations Hub
5307 E. Mockingbird Ln.
Suite 915
UK Headquarters
Digital Shadows, Ltd.
Level 39
One Canada Square
Widest Collection of Sources
SearchLight monitors for data exposure across the widest
range of sources, within the open, deep and dark web.
No stone is left unturned.
Tailored and Targeted Collection
A register of key assets that uniquely define your organization
and your subsidiaries drives our intelligence machinery.
Why Digital Shadows Get Started
For more information on
Digital Shadows SearchLightTM
and
how we can help protect your
organization from Data Exposure,
please contact us
Visit www.digitalshadows.com
for more information
Call us at US 1-800-889-4143
UK +44 (0)203 393 7001
Email info@digitalshadows.com
Analyst
Added Context
Digital Shadows
intelligence analysts
investigate and add
context, impact and
recommended action.
Asset Registration
Organizations register
their company assets
with Digital Shadows,
including code samples,
document markings and
email footers.
Explore View
Organizations can view
the credential exposure
at a strategic level,
identifying trends over
time.
Mitigation Options
Each incident comes with a severity level and mitigation
options. We also offer Managed Takedown Service, which
provides end-to-end management for shutting down
malicious activity and offloading this time consuming task
from your team.
About Digital Shadows Digital Shadows monitors and manages digital risk across the widest range of data sources
within the open, deep and dark web to protect an organization’s business, brand and
reputation. The Digital Shadows SearchLightTM
service combines scalable data analytics with
intelligence analysts to manage and mitigate risks of an organization’s cyber threat, data
exposure, brand exposure, VIP exposure, infrastructure exposure, physical threat, and third
party risk, and create an up-to-the-minute view of an organization’s digital risk with tailored
threat intelligence. The company is jointly headquartered in London and San Francisco.
For more information, visit www.digitalshadows.com.
Data Exposure Example
Digital Shadows SearchLight™ What We Did
. Headquarters
al Shadows, Inc.
Pine Street, Suite 600
Francisco, CA 94104
North American Intelligence Operations Hub
5307 E. Mockingbird Ln.
Suite 915
Dallas, TX 75206
UK Headquarters
Digital Shadows, Ltd.
Level 39
One Canada Square
London E14 5AB
verview
th Digital Shadows SearchLightTM
, a manufacturing firm discovered
at a third party contractor exposed sensitive Non Disclosure Agreements
ned by its customers via NAS (network addressed storage). Threat
ors may use an organization’s supply chain to gain access to valuable
tems and data such as intellectual property and patents. The
nufacturer is a long-standing Digital Shadows client who engaged
h us to proactively manage their digital assets and third party risks.
Sensitive Data
gital Shadows SearchLightTM
ow We Mitigated the Risk
Risk Detected
Digital Shadows SearchLightTM
uncovered the Non Disclosure Agreement (NDA)
information by monitoring for online mentions of the manufacturing firm’s company
name, project names and third party contractors. Our intelligence team launched an
investigation the same day to assess whether the NDA data was valid and related to
the manufacturing firm as it appeared.
Analyst Reviews and Adds Context
Digital Shadows analysts investigated the NDA data and uncovered that special pricing,
costing, terms and conditions and legal data was visible online. Although the data was
unintentionally exposed by the contractor, we alerted the manufacturer and provided
context and recommendations for thorough mitigation.
Risk Managed
Armed with this context, the manufacturing firm rapidly notified the third party
contractor to remove the sensitive NDA information from public access in their
network addressed storage. Based on recommendations from Digital Shadows, the
manufacturer also modified its policies and procedures for secure data handling.
About Digital Shadows
www.digitalshadows.com
info@digitalshadows.com
+1-888-889-4143 | +44 203 393 7001
J17
U.S. Headquarters
Digital Shadows, Inc.
332 Pine Street, Suite 600
San Francisco, CA 94104
North American Intelligence Operations Hub
5307 E. Mockingbird Ln.
Suite 915
Dallas, TX 75206
UK Headquarters
Digital Shadows, Ltd.
Level 39
One Canada Square
London E14 5AB
Overview
With Digital Shadows SearchLightTM
, a manufacturing firm discovered
that a third party contractor exposed sensitive Non Disclosure Agreements
signed by its customers via NAS (network addressed storage). Threat
actors may use an organization’s supply chain to gain access to valuable
systems and data such as intellectual property and patents. The
manufacturer is a long-standing Digital Shadows client who engaged
with us to proactively manage their digital assets and third party risks.
Contractor Exposed Manufacturer’s
Sensitive Data
Digital Shadows SearchLightTM
How We Mitigated the Risk
Risk Detected
Digital Shadows SearchLightTM
uncovered the Non Disclosure Agreement (NDA)
information by monitoring for online mentions of the manufacturing firm’s company
name, project names and third party contractors. Our intelligence team launched an
investigation the same day to assess whether the NDA data was valid and related to
the manufacturing firm as it appeared.
Analyst Reviews and Adds Context
Digital Shadows analysts investigated the NDA data and uncovered that special pricing,
costing, terms and conditions and legal data was visible online. Although the data was
unintentionally exposed by the contractor, we alerted the manufacturer and provided
context and recommendations for thorough mitigation.
Risk Managed
Armed with this context, the manufacturing firm rapidly notified the third party
contractor to remove the sensitive NDA information from public access in their
network addressed storage. Based on recommendations from Digital Shadows, the
manufacturer also modified its policies and procedures for secure data handling.
About Digital Shadows
www.digitalshadows.com
info@digitalshadows.com
+1-888-889-4143 | +44 203 393 7001
J17
U.S. Headquarters
Digital Shadows, Inc.
332 Pine Street, Suite 600
San Francisco, CA 94104
North American Intelligence Operations Hub
5307 E. Mockingbird Ln.
Suite 915
Dallas, TX 75206
UK Headquarters
Digital Shadows, Ltd.
Level 39
One Canada Square
London E14 5AB
Overview
With Digital Shadows SearchLightTM
, a manufacturing firm discovered
that a third party contractor exposed sensitive Non Disclosure Agreements
signed by its customers via NAS (network addressed storage). Threat
actors may use an organization’s supply chain to gain access to valuable
systems and data such as intellectual property and patents. The
manufacturer is a long-standing Digital Shadows client who engaged
with us to proactively manage their digital assets and third party risks.
Contractor Exposed Manufacturer’s
Sensitive Data
Digital Shadows SearchLightTM
How We Mitigated the Risk
Risk Detected
Digital Shadows SearchLightTM
uncovered the Non Disclosure Agreement (NDA)
information by monitoring for online mentions of the manufacturing firm’s company
name, project names and third party contractors. Our intelligence team launched an
investigation the same day to assess whether the NDA data was valid and related to
the manufacturing firm as it appeared.
Analyst Reviews and Adds Context
Digital Shadows analysts investigated the NDA data and uncovered that special pricing,
costing, terms and conditions and legal data was visible online. Although the data was
unintentionally exposed by the contractor, we alerted the manufacturer and provided
context and recommendations for thorough mitigation.
Risk Managed
Armed with this context, the manufacturing firm rapidly notified the third party
contractor to remove the sensitive NDA information from public access in their
network addressed storage. Based on recommendations from Digital Shadows, the
manufacturer also modified its policies and procedures for secure data handling.
About Digital Shadows
www.digitalshadows.com
info@digitalshadows.com
+1-888-889-4143 | +44 203 393 7001
J17
U.S. Headquarters
Digital Shadows, Inc.
332 Pine Street, Suite 600
San Francisco, CA 94104
North American Intelligence Operations Hub
5307 E. Mockingbird Ln.
Suite 915
Dallas, TX 75206
UK Headquarters
Digital Shadows, Ltd.
Level 39
One Canada Square
London E14 5AB
Overview
With Digital Shadows SearchLightTM
, a manufacturing firm discovered
that a third party contractor exposed sensitive Non Disclosure Agreements
signed by its customers via NAS (network addressed storage). Threat
actors may use an organization’s supply chain to gain access to valuable
systems and data such as intellectual property and patents. The
manufacturer is a long-standing Digital Shadows client who engaged
with us to proactively manage their digital assets and third party risks.
Contractor Exposed Manufacturer’s
Sensitive Data
Digital Shadows SearchLightTM
How We Mitigated the Risk
Risk Detected
Digital Shadows SearchLightTM
uncovered the Non Disclosure Agreement (NDA)
information by monitoring for online mentions of the manufacturing firm’s company
name, project names and third party contractors. Our intelligence team launched an
investigation the same day to assess whether the NDA data was valid and related to
the manufacturing firm as it appeared.
Analyst Reviews and Adds Context
Digital Shadows analysts investigated the NDA data and uncovered that special pricing,
costing, terms and conditions and legal data was visible online. Although the data was
unintentionally exposed by the contractor, we alerted the manufacturer and provided
context and recommendations for thorough mitigation.
Risk Managed
Armed with this context, the manufacturing firm rapidly notified the third party
contractor to remove the sensitive NDA information from public access in their
network addressed storage. Based on recommendations from Digital Shadows, the
manufacturer also modified its policies and procedures for secure data handling.
Third Party Exposure Use Case
Manufacturing Industry
About Digital Shadows
www.digitalshadows.com
info@digitalshadows.com
+1-888-889-4143 | +44 203 393 7001
J17