Patties Foods

Summary

In June 2024, researcher Jeremiah Fowler discovered non-password-protected databases belonging to Patties Foods (Four'N Twenty, Leggo's, Nanna's) managed by third-party Provenio.ai. The exposure included 524k documents: a logging server with 496,296 records plus 25,800 invoices/distribution records containing vendor contacts, emails, banking account numbers, invoice amounts, supplier information, and employee names. Provenio restricted access within hours of notification. Patties claimed "technically wasn't a breach" but a "data exposure" with no evidence of malicious access.

What Happened

Non-password-protected cloud databases managed by Provenio.ai for Patties Foods were publicly accessible, exposing business and vendor data.

Impact on Individuals

Vendor and employee contact information and banking details were exposed but no evidence of malicious access was found.

Organisational Response

Provenio.ai restricted database access within hours. Patties Foods stated no malicious access occurred.