"ourapp/websiteexperiencedsomeissues"nosecurityteam"weweren'tbreached""nobodyisperfect""it wasonly for afewminutes"more usersaffected thaninitiallythoughteasilydisprovedlie"someone'sout to getus"public s3 /elasticsearchplaintextpasswords"don'tworryyour datais safe">100kaccountsbreachednot fixeduntilpubliclydisclosedreally easy,like reallyeasy toexploit"only asmallportion ofour users"data privacycommissionernot notified intime"no evidence itwas exploited"(because therewere no logs)"[the whitehat] isbreakingthe law""we areinvestigating"threatento callpolice onwhite hatignore itand hopeit goesaway"thereare noissues"backtrackingonstatements"highlysophisticatedattacker"(dude withchromeinspector)"ourapp/websiteexperiencedsomeissues"nosecurityteam"weweren'tbreached""nobodyisperfect""it wasonly for afewminutes"more usersaffected thaninitiallythoughteasilydisprovedlie"someone'sout to getus"public s3 /elasticsearchplaintextpasswords"don'tworryyour datais safe">100kaccountsbreachednot fixeduntilpubliclydisclosedreally easy,like reallyeasy toexploit"only asmallportion ofour users"data privacycommissionernot notified intime"no evidence itwas exploited"(because therewere no logs)"[the whitehat] isbreakingthe law""we areinvestigating"threatento callpolice onwhite hatignore itand hopeit goesaway"thereare noissues"backtrackingonstatements"highlysophisticatedattacker"(dude withchromeinspector)

Data Breach Bingo - Call List

(Print) Use this randomly generated list as your call list when playing the game. There is no need to say the BINGO column name. Place some kind of mark (like an X, a checkmark, a dot, tally mark, etc) on each cell as you announce it, to keep track. You can also cut out each item, place them in a bag and pull words from the bag.


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
  1. "our app/website experienced some issues"
  2. no security team
  3. "we weren't breached"
  4. "nobody is perfect"
  5. "it was only for a few minutes"
  6. more users affected than initially thought
  7. easily disproved lie
  8. "someone's out to get us"
  9. public s3 / elasticsearch
  10. plaintext passwords
  11. "don't worry your data is safe"
  12. >100k accounts breached
  13. not fixed until publicly disclosed
  14. really easy, like really easy to exploit
  15. "only a small portion of our users"
  16. data privacy commissioner not notified in time
  17. "no evidence it was exploited" (because there were no logs)
  18. "[the white hat] is breaking the law"
  19. "we are investigating"
  20. threaten to call police on white hat
  21. ignore it and hope it goes away
  22. "there are no issues"
  23. backtracking on statements
  24. "highly sophisticated attacker" (dude with chrome inspector)