data privacycommissionernot notified intime"it wasonly for afewminutes""we areinvestigating""nobodyisperfect""don'tworryyour datais safe"plaintextpasswordsnosecurityteamignore itand hopeit goesaway"weweren'tbreached""[the whitehat] isbreakingthe law""ourapp/websiteexperiencedsomeissues""highlysophisticatedattacker"(dude withchromeinspector)"thereare noissues"more usersaffected thaninitiallythought>100kaccountsbreached"someone'sout to getus"threatento callpolice onwhite hatbacktrackingonstatements"no evidence itwas exploited"(because therewere no logs)easilydisprovedlie"only asmallportion ofour users"really easy,like reallyeasy toexploitpublic s3 /elasticsearchnot fixeduntilpubliclydiscloseddata privacycommissionernot notified intime"it wasonly for afewminutes""we areinvestigating""nobodyisperfect""don'tworryyour datais safe"plaintextpasswordsnosecurityteamignore itand hopeit goesaway"weweren'tbreached""[the whitehat] isbreakingthe law""ourapp/websiteexperiencedsomeissues""highlysophisticatedattacker"(dude withchromeinspector)"thereare noissues"more usersaffected thaninitiallythought>100kaccountsbreached"someone'sout to getus"threatento callpolice onwhite hatbacktrackingonstatements"no evidence itwas exploited"(because therewere no logs)easilydisprovedlie"only asmallportion ofour users"really easy,like reallyeasy toexploitpublic s3 /elasticsearchnot fixeduntilpubliclydisclosed

Data Breach Bingo - Call List

(Print) Use this randomly generated list as your call list when playing the game. There is no need to say the BINGO column name. Place some kind of mark (like an X, a checkmark, a dot, tally mark, etc) on each cell as you announce it, to keep track. You can also cut out each item, place them in a bag and pull words from the bag.


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
  1. data privacy commissioner not notified in time
  2. "it was only for a few minutes"
  3. "we are investigating"
  4. "nobody is perfect"
  5. "don't worry your data is safe"
  6. plaintext passwords
  7. no security team
  8. ignore it and hope it goes away
  9. "we weren't breached"
  10. "[the white hat] is breaking the law"
  11. "our app/website experienced some issues"
  12. "highly sophisticated attacker" (dude with chrome inspector)
  13. "there are no issues"
  14. more users affected than initially thought
  15. >100k accounts breached
  16. "someone's out to get us"
  17. threaten to call police on white hat
  18. backtracking on statements
  19. "no evidence it was exploited" (because there were no logs)
  20. easily disproved lie
  21. "only a small portion of our users"
  22. really easy, like really easy to exploit
  23. public s3 / elasticsearch
  24. not fixed until publicly disclosed