Security Advisories

We are proactively advancing our security to identify new threats and help ensure the safety of customer data, devices and information. Because threats to our corporate environment and customer assets are ever present, we also value the important role the security community plays in helping us mitigate information security risk. If you have information about possible security vulnerabilities in any DoorBird product or service, please submit a report using this email address: ResponsibleDisclosure @ doorbird.com

Date	Severity
2023-09-20	Low	We have recently become aware of an incident that has resulted in a potential loss of some backup data. As soon as we were made aware of this incident, our internal security procedures were initiated to conduct a thorough investigation and to assess and mitigate potential risks. In compliance with our legal obligations, we notified the Berlin Commissioner for Data Protection and Freedom of Information of the breach, the appropriate data protection authority in Berlin. We have instantly coordinated all recommended countermeasures and notifications with the authorities. According to a thorough risk analysis by internal and external experts, some employees' personal data and some generic customer data have been affected. We have advised all affected employees, provided guidance on mitigative measures, and will support them accordingly during this process. Sensitive customer data was not affected. Access data to our products was not affected. Users of DoorBird products can rest assured the incident does not create a risk that their products can be operated without authorization. Data security and data protection are of utmost importance for DoorBird, and we are committed to continuously striving to improve our processes, procedures, and due diligence of our IT practices to prevent a similar incident occurring in the future.

Date

Severity

2023-09-20

Low

We have recently become aware of an incident that has resulted in a potential loss of some backup data. As soon as we were made aware of this incident, our internal security procedures were initiated to conduct a thorough investigation and to assess and mitigate potential risks. In compliance with our legal obligations, we notified the Berlin Commissioner for Data Protection and Freedom of Information of the breach, the appropriate data protection authority in Berlin. We have instantly coordinated all recommended countermeasures and notifications with the authorities.

According to a thorough risk analysis by internal and external experts, some employees' personal data and some generic customer data have been affected. We have advised all affected employees, provided guidance on mitigative measures, and will support them accordingly during this process. Sensitive customer data was not affected. Access data to our products was not affected. Users of DoorBird products can rest assured the incident does not create a risk that their products can be operated without authorization.

Data security and data protection are of utmost importance for DoorBird, and we are committed to continuously striving to improve our processes, procedures, and due diligence of our IT practices to prevent a similar incident occurring in the future.