threatento callpolice onwhite hat>100kaccountsbreached"only asmallportion ofour users"plaintextpasswordspublic s3 /elasticsearch"highlysophisticatedattacker"(dude withchromeinspector)ignore itand hopeit goesaway"thereare noissues""it wasonly for afewminutes"really easy,like reallyeasy toexploit"[the whitehat] isbreakingthe law""nobodyisperfect"more usersaffected thaninitiallythought"we areinvestigating""weweren'tbreached"not fixeduntilpubliclydiscloseddata privacycommissionernot notified intime"ourapp/websiteexperiencedsomeissues""someone'sout to getus"easilydisprovedlie"no evidence itwas exploited"(because therewere no logs)"don'tworryyour datais safe"nosecurityteambacktrackingonstatementsthreatento callpolice onwhite hat>100kaccountsbreached"only asmallportion ofour users"plaintextpasswordspublic s3 /elasticsearch"highlysophisticatedattacker"(dude withchromeinspector)ignore itand hopeit goesaway"thereare noissues""it wasonly for afewminutes"really easy,like reallyeasy toexploit"[the whitehat] isbreakingthe law""nobodyisperfect"more usersaffected thaninitiallythought"we areinvestigating""weweren'tbreached"not fixeduntilpubliclydiscloseddata privacycommissionernot notified intime"ourapp/websiteexperiencedsomeissues""someone'sout to getus"easilydisprovedlie"no evidence itwas exploited"(because therewere no logs)"don'tworryyour datais safe"nosecurityteambacktrackingonstatements

Data Breach Bingo - Call List

(Print) Use this randomly generated list as your call list when playing the game. There is no need to say the BINGO column name. Place some kind of mark (like an X, a checkmark, a dot, tally mark, etc) on each cell as you announce it, to keep track. You can also cut out each item, place them in a bag and pull words from the bag.


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
  1. threaten to call police on white hat
  2. >100k accounts breached
  3. "only a small portion of our users"
  4. plaintext passwords
  5. public s3 / elasticsearch
  6. "highly sophisticated attacker" (dude with chrome inspector)
  7. ignore it and hope it goes away
  8. "there are no issues"
  9. "it was only for a few minutes"
  10. really easy, like really easy to exploit
  11. "[the white hat] is breaking the law"
  12. "nobody is perfect"
  13. more users affected than initially thought
  14. "we are investigating"
  15. "we weren't breached"
  16. not fixed until publicly disclosed
  17. data privacy commissioner not notified in time
  18. "our app/website experienced some issues"
  19. "someone's out to get us"
  20. easily disproved lie
  21. "no evidence it was exploited" (because there were no logs)
  22. "don't worry your data is safe"
  23. no security team
  24. backtracking on statements