pCloud: investigation ongoing following reports of anomalies

Have you ever had the unpleasant surprise of discovering unknown files in your online storage space? Imagine the confusion of pCloud users, a Swiss storage service, who reported similar anomalies. These reports prompted the company to launch an investigation, but what is really happening?

The 3 key points not to miss

• pCloud users have reported the appearance of unknown files and the deletion of personal documents.
• The company has launched an investigation, but no data breach has been confirmed at this time.
• pCloud is examining account isolation and the security of its platforms to prevent any data exposure.

Reports of anomalies on the forum

Since early February, pCloud users have shared their concerns on r/pcloud, an unofficial subreddit. Several subscribers reported unknown files and folders in their storage space, as well as documents deleted without explanation. These accounts vary, with some users mentioning a display bug rather than actual unauthorized access.

One user mentioned a persistent anomaly despite enabling two-factor authentication. Others suggest a technical issue related to the allocation of storage spaces, resulting in overlapping identifiers between different accounts.

pCloud’s reaction and opening of an investigation

The official pCloudApp account responded to reports on the forum, announcing the opening of an investigation. The company considers this situation a “serious concern,” especially if personal data or metadata became visible to other users, in violation of the GDPR.

pCloud teams are focusing on examining account isolation at the server level and verifying all their platforms. Although no unauthorized access has been detected so far, investigations are ongoing to assess potential metadata exposure.

Measures taken by pCloud

pCloud has launched a formal incident response procedure, including a targeted investigation of all platforms and a complete verification of data isolation on the server side. The company is collaborating with its Data Protection team to assess the incident in light of GDPR obligations. If the incident proves to be a personal data breach requiring notification, pCloud commits to promptly informing the competent supervisory authority and affected users.

Context and history of pCloud

Founded in 2013, pCloud is a Swiss company specializing in online storage. It stands out with its pCloud Crypto service, offering client-side encryption for enhanced data security. Facing competition from giants like Google Drive, Dropbox, and Microsoft OneDrive, pCloud emphasizes data protection and user privacy. Recent incidents highlight the importance of these commitments in a sector where security is paramount.

Source:

---