"ourapp/websiteexperiencedsomeissues"really easy,like reallyeasy toexploit"thereare noissues"data privacycommissionernot notified intimenot fixeduntilpubliclydisclosedmore usersaffected thaninitiallythought"it wasonly for afewminutes""we areinvestigating""weweren'tbreached"ignore itand hopeit goesawaythreatento callpolice onwhite hatplaintextpasswords"nobodyisperfect""someone'sout to getus""[the whitehat] isbreakingthe law""no evidence itwas exploited"(because therewere no logs)"highlysophisticatedattacker"(dude withchromeinspector)public s3 /elasticsearch"only asmallportion ofour users"backtrackingonstatementseasilydisprovedlienosecurityteam"don'tworryyour datais safe">100kaccountsbreached"ourapp/websiteexperiencedsomeissues"really easy,like reallyeasy toexploit"thereare noissues"data privacycommissionernot notified intimenot fixeduntilpubliclydisclosedmore usersaffected thaninitiallythought"it wasonly for afewminutes""we areinvestigating""weweren'tbreached"ignore itand hopeit goesawaythreatento callpolice onwhite hatplaintextpasswords"nobodyisperfect""someone'sout to getus""[the whitehat] isbreakingthe law""no evidence itwas exploited"(because therewere no logs)"highlysophisticatedattacker"(dude withchromeinspector)public s3 /elasticsearch"only asmallportion ofour users"backtrackingonstatementseasilydisprovedlienosecurityteam"don'tworryyour datais safe">100kaccountsbreached

Data Breach Bingo - Call List

(Print) Use this randomly generated list as your call list when playing the game. There is no need to say the BINGO column name. Place some kind of mark (like an X, a checkmark, a dot, tally mark, etc) on each cell as you announce it, to keep track. You can also cut out each item, place them in a bag and pull words from the bag.


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
  1. "our app/website experienced some issues"
  2. really easy, like really easy to exploit
  3. "there are no issues"
  4. data privacy commissioner not notified in time
  5. not fixed until publicly disclosed
  6. more users affected than initially thought
  7. "it was only for a few minutes"
  8. "we are investigating"
  9. "we weren't breached"
  10. ignore it and hope it goes away
  11. threaten to call police on white hat
  12. plaintext passwords
  13. "nobody is perfect"
  14. "someone's out to get us"
  15. "[the white hat] is breaking the law"
  16. "no evidence it was exploited" (because there were no logs)
  17. "highly sophisticated attacker" (dude with chrome inspector)
  18. public s3 / elasticsearch
  19. "only a small portion of our users"
  20. backtracking on statements
  21. easily disproved lie
  22. no security team
  23. "don't worry your data is safe"
  24. >100k accounts breached