"someone'sout to getus""nobodyisperfect""we areinvestigating""[the whitehat] isbreakingthe law"ignore itand hopeit goesaway"it wasonly for afewminutes"public s3 /elasticsearcheasilydisprovedliebacktrackingonstatements"no evidence itwas exploited"(because therewere no logs)"ourapp/websiteexperiencedsomeissues""highlysophisticatedattacker"(dude withchromeinspector)>100kaccountsbreachedreally easy,like reallyeasy toexploitthreatento callpolice onwhite hat"don'tworryyour datais safe"nosecurityteamplaintextpasswords"thereare noissues""weweren'tbreached"data privacycommissionernot notified intimemore usersaffected thaninitiallythoughtnot fixeduntilpubliclydisclosed"only asmallportion ofour users""someone'sout to getus""nobodyisperfect""we areinvestigating""[the whitehat] isbreakingthe law"ignore itand hopeit goesaway"it wasonly for afewminutes"public s3 /elasticsearcheasilydisprovedliebacktrackingonstatements"no evidence itwas exploited"(because therewere no logs)"ourapp/websiteexperiencedsomeissues""highlysophisticatedattacker"(dude withchromeinspector)>100kaccountsbreachedreally easy,like reallyeasy toexploitthreatento callpolice onwhite hat"don'tworryyour datais safe"nosecurityteamplaintextpasswords"thereare noissues""weweren'tbreached"data privacycommissionernot notified intimemore usersaffected thaninitiallythoughtnot fixeduntilpubliclydisclosed"only asmallportion ofour users"

Data Breach Bingo - Call List

(Print) Use this randomly generated list as your call list when playing the game. There is no need to say the BINGO column name. Place some kind of mark (like an X, a checkmark, a dot, tally mark, etc) on each cell as you announce it, to keep track. You can also cut out each item, place them in a bag and pull words from the bag.


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
  1. "someone's out to get us"
  2. "nobody is perfect"
  3. "we are investigating"
  4. "[the white hat] is breaking the law"
  5. ignore it and hope it goes away
  6. "it was only for a few minutes"
  7. public s3 / elasticsearch
  8. easily disproved lie
  9. backtracking on statements
  10. "no evidence it was exploited" (because there were no logs)
  11. "our app/website experienced some issues"
  12. "highly sophisticated attacker" (dude with chrome inspector)
  13. >100k accounts breached
  14. really easy, like really easy to exploit
  15. threaten to call police on white hat
  16. "don't worry your data is safe"
  17. no security team
  18. plaintext passwords
  19. "there are no issues"
  20. "we weren't breached"
  21. data privacy commissioner not notified in time
  22. more users affected than initially thought
  23. not fixed until publicly disclosed
  24. "only a small portion of our users"