TinaCloud: Public Disclosure of Security Breach

Overview of the Incident On 15th December 2024, TinaCMS identified unauthorized activity involving compromised AWS access keys. These keys were exploited to send unauthorized emails (targeting the general French community, not Tina customers specifically) using our Amazon Simple Email Service (SES) infrastructure. !A screenshot of one of the phishing emails As an automated measure, the impacted key was revoked.