Adobe Analytics data leakage incident due to ingestion bug
Summary
Hide ▲
Show ▼
Adobe Analytics experienced a data leakage incident on September 17, 2025, due to a bug introduced during a performance optimization change. The bug caused data from some organizations to appear in the analytics instances of others for approximately one day. The issue affected numerous Analytics services and downstream applications. Adobe has advised customers to delete all impacted data from their systems, backups, and downstream environments. The bug did not result from malicious activity or a cybersecurity incident. Affected customers may have inadvertently exposed sensitive data, potentially violating regulations such as VPPA, CPPA, and GDPR.
Timeline
-
01.10.2025 22:58 1 articles · 3h ago
Adobe Analytics bug causes data leakage incident
On September 17, 2025, at 12:20 UTC, a performance optimization change introduced a bug in Adobe Analytics Edge data collection. The bug caused data from some organizations to appear in the analytics instances of others for approximately one day. Adobe reverted the change on September 18 at 11:00 UTC and advised customers to delete all impacted data from their systems, backups, and downstream environments. The incident did not result from malicious activity or a cybersecurity incident, but it potentially exposed sensitive data, raising concerns about regulatory compliance.
Show sources
- Adobe Analytics bug leaked customer tracking data to other tenants — www.bleepingcomputer.com — 01.10.2025 22:58
Information Snippets
-
The data leakage occurred on September 17, 2025, at 12:20 UTC and lasted until September 18, 2025, at 11:00 UTC.
First reported: 01.10.2025 22:581 source, 1 articleShow sources
- Adobe Analytics bug leaked customer tracking data to other tenants — www.bleepingcomputer.com — 01.10.2025 22:58
-
The bug affected approximately 3–5% of the collected data.
First reported: 01.10.2025 22:581 source, 1 articleShow sources
- Adobe Analytics bug leaked customer tracking data to other tenants — www.bleepingcomputer.com — 01.10.2025 22:58
-
Impacted services included Data Collection, Media Processing, Customer Attributes, and reporting applications.
First reported: 01.10.2025 22:581 source, 1 articleShow sources
- Adobe Analytics bug leaked customer tracking data to other tenants — www.bleepingcomputer.com — 01.10.2025 22:58
-
Downstream applications such as Customer Journey Analytics, Real-Time CDP, and Adobe Journey Optimizer were also affected.
First reported: 01.10.2025 22:581 source, 1 articleShow sources
- Adobe Analytics bug leaked customer tracking data to other tenants — www.bleepingcomputer.com — 01.10.2025 22:58
-
Adobe advised customers to delete all impacted data from their systems, backups, and downstream environments.
First reported: 01.10.2025 22:581 source, 1 articleShow sources
- Adobe Analytics bug leaked customer tracking data to other tenants — www.bleepingcomputer.com — 01.10.2025 22:58
-
The bug did not result from malicious activity or a cybersecurity incident.
First reported: 01.10.2025 22:581 source, 1 articleShow sources
- Adobe Analytics bug leaked customer tracking data to other tenants — www.bleepingcomputer.com — 01.10.2025 22:58
-
Potential regulatory implications include VPPA, CPPA, and GDPR.
First reported: 01.10.2025 22:581 source, 1 articleShow sources
- Adobe Analytics bug leaked customer tracking data to other tenants — www.bleepingcomputer.com — 01.10.2025 22:58