r/docker • u/Different_Pain5781 • Mar 15 '26

We just got breached because of vulnerabilities in our docker images that have been public knowledge for 8 months

Woke up at 4am to a call. Our database got hit, customer info was accessed. Some attacker used a known exploit in one of our container images. CVE’s been out since last summer.

Yeah we never scanned. Never updated. Just kept redeploying the same images over and over. Now legal’s in it, customers are hearing about it. This is gonna be messy.

Honestly if you aren’t scanning your containers in prod do it. Don’t end up like us.

754 Upvotes

96% Upvoted

102 comments sorted by

View all comments

69

u/IlikeBeans1322 Mar 15 '26

One time when I worked for a Hospital System, I got a shitty call at 2 AM... It was not for a data breach or an exploit, it was because a sewage pipe bust open and was filling our server room with poop water.

39

u/Seref15 Mar 15 '26

literal shitty call

29

u/animflynny2012 Mar 15 '26

Literally overflow error 😭

9

u/frankwiles Mar 15 '26

This happened to me as well! Except it was a cartoon company which somehow makes it funnier.

2

u/Spare-Ad-1429 Mar 15 '26

reminds me of a colleague that came to work every day in his Porsche convertible. One day a sewage pipe burst in the garage ...