Security Update

Verkada Customers –

We are writing to let you know that Verkada has concluded its own review of the security incident. While we wait for the final report from our outside forensic firm, Mandiant, we want to update you on our findings thus far.

Our review determined that 95 customers had video security and image data accessed by the attackers. In total this represents less than two percent of our approximately 6,000 customer population. This is in addition to the data we previously disclosed on March 10th. We have confidence that this reflects the full scope of the attacker’s access to any customer video and images.

Our review also confirmed that there was no compromise of user passwords or password hashes, or Verkada’s internal network, financial systems or other business systems. After additional review, we can confirm that the list of information that attackers accessed, as reported in our March 10 update, is accurate.

Verkada has already contacted the impacted customers, and today we are reaching out to provide updated details of our internal findings about how attackers accessed their systems. If you have not been contacted, your system was not accessed by the attackers.

Thank you for your patience as we worked to determine the full scope of the attack. As we await Mandiant’s findings, we will continue to move forward with the work outlined in our 100-day plan – identifying and implementing additional security measures and policies to protect Verkada’s systems. We will update you as that work continues.

Finally, today, we released a new customer tool – Support Permission System (SPS) – which gives customers direct control and increased security regarding technical support they receive from Verkada. This is the first step in the development and improvement of tools and permissions that will ensure we can appropriately and effectively balance our delivery of customer support with the privacy and security of customer data as our company continues to grow. Read more about this tool here.