nosecurityteam"we areinvestigating""[the whitehat] isbreakingthe law"really easy,like reallyeasy toexploit"weweren'tbreached">100kaccountsbreachedeasilydisprovedlie"only asmallportion ofour users"data privacycommissionernot notified intimebacktrackingonstatementsnot fixeduntilpubliclydisclosed"thereare noissues"ignore itand hopeit goesaway"don'tworryyour datais safe""ourapp/websiteexperiencedsomeissues"more usersaffected thaninitiallythoughtthreatento callpolice onwhite hat"it wasonly for afewminutes""someone'sout to getus""nobodyisperfect"plaintextpasswords"highlysophisticatedattacker"(dude withchromeinspector)public s3 /elasticsearch"no evidence itwas exploited"(because therewere no logs)nosecurityteam"we areinvestigating""[the whitehat] isbreakingthe law"really easy,like reallyeasy toexploit"weweren'tbreached">100kaccountsbreachedeasilydisprovedlie"only asmallportion ofour users"data privacycommissionernot notified intimebacktrackingonstatementsnot fixeduntilpubliclydisclosed"thereare noissues"ignore itand hopeit goesaway"don'tworryyour datais safe""ourapp/websiteexperiencedsomeissues"more usersaffected thaninitiallythoughtthreatento callpolice onwhite hat"it wasonly for afewminutes""someone'sout to getus""nobodyisperfect"plaintextpasswords"highlysophisticatedattacker"(dude withchromeinspector)public s3 /elasticsearch"no evidence itwas exploited"(because therewere no logs)

Data Breach Bingo - Call List

(Print) Use this randomly generated list as your call list when playing the game. There is no need to say the BINGO column name. Place some kind of mark (like an X, a checkmark, a dot, tally mark, etc) on each cell as you announce it, to keep track. You can also cut out each item, place them in a bag and pull words from the bag.


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
  1. no security team
  2. "we are investigating"
  3. "[the white hat] is breaking the law"
  4. really easy, like really easy to exploit
  5. "we weren't breached"
  6. >100k accounts breached
  7. easily disproved lie
  8. "only a small portion of our users"
  9. data privacy commissioner not notified in time
  10. backtracking on statements
  11. not fixed until publicly disclosed
  12. "there are no issues"
  13. ignore it and hope it goes away
  14. "don't worry your data is safe"
  15. "our app/website experienced some issues"
  16. more users affected than initially thought
  17. threaten to call police on white hat
  18. "it was only for a few minutes"
  19. "someone's out to get us"
  20. "nobody is perfect"
  21. plaintext passwords
  22. "highly sophisticated attacker" (dude with chrome inspector)
  23. public s3 / elasticsearch
  24. "no evidence it was exploited" (because there were no logs)