---
title: "Discussion on \"Case Study: Cross-Tenant Data Exfiltration via Backup Restore\" | Hashnode"
description: "Discussion on \"Case Study: Cross-Tenant Data Exfiltration via Backup Restore\". How broken tenant isolation and missing authorization checks in backup restoration can allow attackers to access sensitive data belonging to other organizations.\nFull video at : https://youtu.be/AshvGLWsclw"
url: "https://hashnode.com/posts/case-study-cross-tenant-data-exfiltration-via-backup-restore/6ad6108301bf51809c3a6b0f"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Case Study: Cross-Tenant Data Exfiltration via Backup Restore](https://ovawatch-security.hashnode.dev/case-study-cross-tenant-data-exfiltration-via-backup-restore?utm_source=hashnode&utm_medium=feed)

How broken tenant isolation and missing authorization checks in backup restoration can allow attackers to access sensitive data belonging to other organizations. Full video at : https://youtu.be/AshvGLWsclw

Oct 18 · 9 min read · ovawatch-security.hashnode.dev  
Read the article

-   [#appsec](https://hashnode.com/tag/appsec)
-   [#infosec](https://hashnode.com/tag/infosec)
-   [#bugbounty](https://hashnode.com/tag/bugbounty)
-   [#cyber](https://hashnode.com/tag/cyber)
-   [#cybersecurity](https://hashnode.com/tag/cybersecurity)
-   [#idor](https://hashnode.com/tag/idor)
-   [#application-security](https://hashnode.com/tag/application-security)

## Written by

[Dimakatso Sebatane](https://hashnode.com/@ovawatch-security)

@ovawatch-security · Remote

  
[View profile](https://hashnode.com/@ovawatch-security)

Real-World Security Research | Penetration Testing | Offensive Security

Ovawatch Security Pty (Ltd) is a cybersecurity company focused on penetration testing, application security, and real-world vulnerability research. We share technical findings, attack techniques, and practical remediation insights across web applications, APIs, Active Directory, and cloud environments.

## Responses

Markdown supported · ⌘↵ to post

No responses yet.