Breach — Nitro Pdf Data

The incident led to the compromise of W‑2 information for of the city, which employs an average of 120 part‑time and full‑time workers annually.

According to security reports verified by platforms like Have I Been Pwned , the Nitro PDF service suffered a massive data breach starting in September 2020. The incident involved unauthorized access to a Nitro database by a third party, which was initially downplayed as an "isolated incident" by the company before the full scale was revealed.

The implications were profound. For a company like Apple to have its internal documents circulating among hackers—even in the form of document titles and metadata—represented an unprecedented supply‑chain security failure. One compromised vendor had opened a backdoor into the digital operations of the world's most valuable enterprises.

IP addresses, company names, account creation dates, and administrative flags. The Danger of Document Titles nitro pdf data breach

What they didn’t do:

By taking these precautions, you can reduce the risk of data breaches and protect your sensitive information.

The cybercrime group was identified as the party responsible for the attack. ShinyHunters is known for high-profile database breaches, frequently targeting companies and selling the stolen data on illicit hacker forums. The Response and Impact The incident led to the compromise of W‑2

The data breaches were not the only security concerns plaguing Nitro's software. Throughout 2024, 2025, and into 2026, security researchers disclosed a steady stream of affecting Nitro PDF Pro across multiple versions:

| | Details Included | Risk Level | |-------------------|----------------------|----------------| | Personal Identifiers | Full name, username, email address | High (phishing, spam) | | Authentication | bcrypt-hashed passwords (salted) | Medium (if password weak) | | Account Metadata | Subscription type, account creation date, last login IP address (some records) | Medium (targeted attacks) | | Billing Information | Partial billing addresses (no full credit card numbers or CVV) | Low (but can enable social engineering) | | Document Metadata | Filenames of PDFs stored in Nitro Cloud | High (exposes sensitive document types) |

As suggested by security practices like those on Berry OIT , adding MFA is critical for protecting accounts. The implications were profound

The Nitro PDF Data Breach: What Happened and What It Means for Corporate Security

Nitro PDF’s client base includes some of the world's largest companies. Records related to employees at the following organizations were reportedly found in the leaked data: Tech Giants : Google, Apple, and Microsoft. Financial Institutions : Chase, Citibank, and JPMorgan Chase. : Also listed among affected business customers. Response and Remediation Password Resets

If you are one of the 10 million users affected by the Nitro PDF data breach, here are some steps you can take to protect yourself:

The lesson is brutal but simple: . And in 2020, a publicly accessible MongoDB with MD5 passwords was an invitation to disaster.