>but I think it's more like a stolen credit card situation How did the account get compromised? What was the nature of the attack (e.g. cryptocurrency mining, expensive egress traffic for file hosting, etc.)? Every (consumer) credit card I've seen requires you to take reasonable steps to keep the cards secure to be eligible for fraud protection (e.g. changing the PIN if compromised, not lending it to people, alerting…
Ask HN: One of our Azure accounts was hacked – how to negotiate the bill?
11–20 of 81 posts
Re: Ask HN: One of our Azure accounts was hacked – how to negotiate the bill?
#12I'm not sure why you would be liable for fraud
Re: Ask HN: One of our Azure accounts was hacked – how to negotiate the bill?
#13You should still have someone to keep an eye on it when using cloud solutions. And when you already have someone to keep an eye on it there's a good chance you might be better off managing the infrastructure yourself.
Re: Ask HN: One of our Azure accounts was hacked – how to negotiate the bill?
#14Once you pay it, you lose all leverage. You're much less likely to ever get any money back.
Probably consult with a lawyer.
Cloud hosting charges are basically all profit for the hosting company. They didn't really lose anything except a bit of electricity. In my experience, companies are pretty willing to forgive fraudulent charges if you don't have an unusual history of them.
Re: Ask HN: One of our Azure accounts was hacked – how to negotiate the bill?
#15We got the money back and fired the guy who had a jenkins opened without password, granting terminal access to anyone.
Re: Ask HN: One of our Azure accounts was hacked – how to negotiate the bill?
#16Re: Ask HN: One of our Azure accounts was hacked – how to negotiate the bill?
#17When that happened to us, we found an article showing Tesla got hacked the same week as us (was aws) and they got the money back, so why not us? We got the money back and fired the guy who had a jenkins opened without password, granting terminal access to anyone.
Why did you fire the employee (?) so quickly? Did he have a history of negligence and/or incompetence on the job and this was the last straw that broke the camel's back?
Re: Ask HN: One of our Azure accounts was hacked – how to negotiate the bill?
#18When that happened to us, we found an article showing Tesla got hacked the same week as us (was aws) and they got the money back, so why not us? We got the money back and fired the guy who had a jenkins opened without password, granting terminal access to anyone.
Re: Ask HN: One of our Azure accounts was hacked – how to negotiate the bill?
#19Unless they're somehow at fault by exposing your credentials or making it easier for hackers to log in without 2FA or something of that nature.
If you're using a credit card to pay (though can't see a credit card having a 200k limit, even business) you might want to see if they can help (though it's not the credit card itself that was stolen, so it's unlikely they'd cover you). Otherwise, I'd imagine you're SOL unless you have some other insurance you can rely on.
Re: Ask HN: One of our Azure accounts was hacked – how to negotiate the bill?
#20I'm not sure why you would be liable for fraud
This would've been much easier if someone stole your credit card and bought things with it (the CC company would help with the chargeback).