Update: Investigation continues - no change to impact Our investigation with independent external security partners continues. There is no evidence of unauthorized access to customer data or Intercom accounts. All Intercom services remain fully operational. The only impact has been to the compromised packages reported previously. The compromised versions (intercom-client@7.0.4 and intercom-php@5.0.2) were removed and safe versions remain available. Since our last update, we have completed credential rotation and continued hardening our development environment with additional security controls. We will post a final update when we are ready to close this incident.
Last update on
Third-Party Santander has successfully applied a fix. The service is performing as expected. Avoiding a reoccurrence is our priority as we closely monitor the service.
Last update on
Monitors
Xero Developer Platform