{"id":47380,"date":"2022-07-04T13:10:18","date_gmt":"2022-07-04T13:10:18","guid":{"rendered":"http:\/\/2fcf2248-a389-4420-bd6c-17066657bdc2"},"modified":"2022-07-04T13:10:18","modified_gmt":"2022-07-04T13:10:18","slug":"hackerone-employee-accessed-bug-reports-to-claim-extra-bounties","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/hackerone-employee-accessed-bug-reports-to-claim-extra-bounties\/","title":{"rendered":"HackerOne employee accessed bug reports to claim extra bounties"},"content":{"rendered":"<div><img decoding=\"async\" src=\"https:\/\/www.zdnet.com\/a\/img\/resize\/6b77a5fd197abe6efda06d9e56e53677cd45c912\/2022\/02\/16\/dcea0eae-86e4-40d6-92c7-1f25e2d9ee0d\/getty-hacker-hands-on-a-keyboard.jpg?auto=webp&amp;fit=crop&amp;height=675&amp;width=1200\" class=\"ff-og-image-inserted\"><\/div>\n<p>The largest bug bounty platform HackerOne said it has fired an employee who took bug reports submitted by external researchers and filed the same reports elsewhere for personal gain.&nbsp;<\/p>\n<p>HackerOne is one bug bounty platform that big companies and government departments have turned to manage their bug bounties. HackerOne receives bug reports from ethical hackers about software, and then internally triages the reports to determine whether or not to pay rewards to those who report them.&nbsp;<\/p>\n<p>There&#8217;s big money at stake. By 2020, HackerOne had <a href=\"https:\/\/www.zdnet.com\/article\/this-is-how-much-top-hackers-are-earning-from-bug-bounties\/\" rel=\"follow\">paid out over $100 million to participants who&#8217;d reported over 181,000 vulnerabilities through bounties it manages<\/a>&nbsp;since launching in 2012. Last year Zoom, a HackerOne customer, <a href=\"https:\/\/www.zdnet.com\/article\/zoom-awards-1-8-million-in-bug-bounty-rewards-over-2021\/\" rel=\"follow\">paid out $1.4 million through HackerOne managed bounties<\/a>.&nbsp;<\/p>\n<p>HackerOne co-founder and CISO Chris Evans&nbsp;<a href=\"https:\/\/hackerone.com\/reports\/1622449\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">said in a Friday blogpost<\/a> that the now-former employee \u2014 whose role was to triage bugs for numerous customer bounty programs \u2014 had improperly accessed security reports at some point between April 4 and June 22 and then leaked the information outside of the HackerOne platform to claim additional bounties elsewhere.&nbsp;<\/p>\n<p>The employee wrongfully received bounties in a &#8220;handful of disclosures&#8221;, according to Evans. &nbsp;<\/p>\n<p>The firm investigated the incident after receiving a customer filed a complaint on June 22 asking it to investigate &#8220;a suspicious vulnerability disclosure made outside of the HackerOne platform.&#8221; The reporter, using the name &#8220;rzlr&#8221;, had used &#8220;threatening communication&#8221; about the vulnerability disclosure.&nbsp;<\/p>\n<p>&#8220;This customer expressed skepticism that this was a genuine collision and provided detailed reasoning,&#8221; said Evans.&nbsp;<\/p>\n<p>Evans said that the former employee anonymously disclosed this vulnerability information outside the HackerOne platform with the goal of claiming additional bounties.&nbsp;<\/p>\n<p>&#8220;Our investigation has concluded that a (now former) HackerOne employee improperly accessed vulnerability data of customers to re-submit duplicate vulnerabilities to those same customers for personal gain,&#8221; he explains later.<\/p>\n<p>&#8220;This is a clear violation of our values, our culture, our policies, and our employment contracts. In under 24 hours, we worked quickly to contain the incident by identifying the then-employee and cutting off access to data. We have since terminated the employee, and further bolstered our defenses to avoid similar situations in the future.&#8221;<\/p>\n<p>HackerOne terminated the employee&#8217;s system access and remotely locked their laptop on June 23. It interviewed the employee on June 24 and on June 27 &#8220;took possession of laptop of suspended threat actor and conducted remote forensics imaging and analysis.&#8221;&nbsp;<\/p>\n<p>The employee, who had system access since April 4, had been in contact with seven HackerOne customers.<\/p>\n<p>HackerOne officially terminated the employee on June 30. By July 1, HackerOne had notified all customers whose bug bounty programs had any interaction with the employee, it said.&nbsp;<\/p>\n<p>HackerOne says it is confident the external disclosure was not the work of multiple insider threats, but the one employee.&nbsp;<\/p>\n<p>&#8220;This was a serious incident. We are confident the insider access is now contained. Insider threats are one of the most insidious in cybersecurity, and we stand ready to do everything in our power to reduce the likelihood of such incidents in the future,&#8221; said Evans.<\/p>\n<p>Evans admits HackerOne&#8217;s existing detection and response systems didn&#8217;t proactively detect this threat. The firm plans on enhancing its screening process for employees, improving data isolation and network logging, and will implement new simulations to test whether it can detect insider threats. &nbsp;&nbsp;<\/p>\n<p>HackerOne <a href=\"https:\/\/www.hackerone.com\/press-release\/hackerone-caps-growth-year-49-million-investment\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">raised in $49 million in funding in January<\/a>, bringing its total funding to $160 million. Customers include The U.S. Department of Defense, Dropbox, General Motors, GitHub, Goldman Sachs, Google, Hyatt, Microsoft, Singapore&#8217;s Ministry of Defense, Nintendo, PayPal, Slack, Starbucks, Twitter, and Yahoo. &nbsp;<\/p>\n<p>READ MORE <a href=\"https:\/\/www.zdnet.com\/article\/hackerone-employee-accessed-bug-reports-to-claim-extra-bounties\/#ftag=RSSbaffb68\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The world&#8217;s biggest third-party bug bounty platform fell victim to an insider threat.<br \/>\nREAD MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[62],"tags":[],"class_list":["post-47380","post","type-post","status-publish","format-standard","hentry","category-zdnet-security"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>HackerOne employee accessed bug reports to claim extra bounties 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/hackerone-employee-accessed-bug-reports-to-claim-extra-bounties\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"HackerOne employee accessed bug reports to claim extra bounties 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/hackerone-employee-accessed-bug-reports-to-claim-extra-bounties\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2022-07-04T13:10:18+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.zdnet.com\/a\/img\/resize\/6b77a5fd197abe6efda06d9e56e53677cd45c912\/2022\/02\/16\/dcea0eae-86e4-40d6-92c7-1f25e2d9ee0d\/getty-hacker-hands-on-a-keyboard.jpg?auto=webp&amp;fit=crop&amp;height=675&amp;width=1200\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/hackerone-employee-accessed-bug-reports-to-claim-extra-bounties\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/hackerone-employee-accessed-bug-reports-to-claim-extra-bounties\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"HackerOne employee accessed bug reports to claim extra bounties\",\"datePublished\":\"2022-07-04T13:10:18+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/hackerone-employee-accessed-bug-reports-to-claim-extra-bounties\\\/\"},\"wordCount\":607,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/hackerone-employee-accessed-bug-reports-to-claim-extra-bounties\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.zdnet.com\\\/a\\\/img\\\/resize\\\/6b77a5fd197abe6efda06d9e56e53677cd45c912\\\/2022\\\/02\\\/16\\\/dcea0eae-86e4-40d6-92c7-1f25e2d9ee0d\\\/getty-hacker-hands-on-a-keyboard.jpg?auto=webp&amp;fit=crop&amp;height=675&amp;width=1200\",\"articleSection\":[\"ZDNet | Security\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/hackerone-employee-accessed-bug-reports-to-claim-extra-bounties\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/hackerone-employee-accessed-bug-reports-to-claim-extra-bounties\\\/\",\"name\":\"HackerOne employee accessed bug reports to claim extra bounties 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/hackerone-employee-accessed-bug-reports-to-claim-extra-bounties\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/hackerone-employee-accessed-bug-reports-to-claim-extra-bounties\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.zdnet.com\\\/a\\\/img\\\/resize\\\/6b77a5fd197abe6efda06d9e56e53677cd45c912\\\/2022\\\/02\\\/16\\\/dcea0eae-86e4-40d6-92c7-1f25e2d9ee0d\\\/getty-hacker-hands-on-a-keyboard.jpg?auto=webp&amp;fit=crop&amp;height=675&amp;width=1200\",\"datePublished\":\"2022-07-04T13:10:18+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/hackerone-employee-accessed-bug-reports-to-claim-extra-bounties\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/hackerone-employee-accessed-bug-reports-to-claim-extra-bounties\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/hackerone-employee-accessed-bug-reports-to-claim-extra-bounties\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.zdnet.com\\\/a\\\/img\\\/resize\\\/6b77a5fd197abe6efda06d9e56e53677cd45c912\\\/2022\\\/02\\\/16\\\/dcea0eae-86e4-40d6-92c7-1f25e2d9ee0d\\\/getty-hacker-hands-on-a-keyboard.jpg?auto=webp&amp;fit=crop&amp;height=675&amp;width=1200\",\"contentUrl\":\"https:\\\/\\\/www.zdnet.com\\\/a\\\/img\\\/resize\\\/6b77a5fd197abe6efda06d9e56e53677cd45c912\\\/2022\\\/02\\\/16\\\/dcea0eae-86e4-40d6-92c7-1f25e2d9ee0d\\\/getty-hacker-hands-on-a-keyboard.jpg?auto=webp&amp;fit=crop&amp;height=675&amp;width=1200\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/hackerone-employee-accessed-bug-reports-to-claim-extra-bounties\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"HackerOne employee accessed bug reports to claim extra bounties\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"HackerOne employee accessed bug reports to claim extra bounties 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/hackerone-employee-accessed-bug-reports-to-claim-extra-bounties\/","og_locale":"en_US","og_type":"article","og_title":"HackerOne employee accessed bug reports to claim extra bounties 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/hackerone-employee-accessed-bug-reports-to-claim-extra-bounties\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2022-07-04T13:10:18+00:00","og_image":[{"url":"https:\/\/www.zdnet.com\/a\/img\/resize\/6b77a5fd197abe6efda06d9e56e53677cd45c912\/2022\/02\/16\/dcea0eae-86e4-40d6-92c7-1f25e2d9ee0d\/getty-hacker-hands-on-a-keyboard.jpg?auto=webp&amp;fit=crop&amp;height=675&amp;width=1200","type":"","width":"","height":""}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/hackerone-employee-accessed-bug-reports-to-claim-extra-bounties\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/hackerone-employee-accessed-bug-reports-to-claim-extra-bounties\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"HackerOne employee accessed bug reports to claim extra bounties","datePublished":"2022-07-04T13:10:18+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/hackerone-employee-accessed-bug-reports-to-claim-extra-bounties\/"},"wordCount":607,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/hackerone-employee-accessed-bug-reports-to-claim-extra-bounties\/#primaryimage"},"thumbnailUrl":"https:\/\/www.zdnet.com\/a\/img\/resize\/6b77a5fd197abe6efda06d9e56e53677cd45c912\/2022\/02\/16\/dcea0eae-86e4-40d6-92c7-1f25e2d9ee0d\/getty-hacker-hands-on-a-keyboard.jpg?auto=webp&amp;fit=crop&amp;height=675&amp;width=1200","articleSection":["ZDNet | Security"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/hackerone-employee-accessed-bug-reports-to-claim-extra-bounties\/","url":"https:\/\/www.threatshub.org\/blog\/hackerone-employee-accessed-bug-reports-to-claim-extra-bounties\/","name":"HackerOne employee accessed bug reports to claim extra bounties 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/hackerone-employee-accessed-bug-reports-to-claim-extra-bounties\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/hackerone-employee-accessed-bug-reports-to-claim-extra-bounties\/#primaryimage"},"thumbnailUrl":"https:\/\/www.zdnet.com\/a\/img\/resize\/6b77a5fd197abe6efda06d9e56e53677cd45c912\/2022\/02\/16\/dcea0eae-86e4-40d6-92c7-1f25e2d9ee0d\/getty-hacker-hands-on-a-keyboard.jpg?auto=webp&amp;fit=crop&amp;height=675&amp;width=1200","datePublished":"2022-07-04T13:10:18+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/hackerone-employee-accessed-bug-reports-to-claim-extra-bounties\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/hackerone-employee-accessed-bug-reports-to-claim-extra-bounties\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/hackerone-employee-accessed-bug-reports-to-claim-extra-bounties\/#primaryimage","url":"https:\/\/www.zdnet.com\/a\/img\/resize\/6b77a5fd197abe6efda06d9e56e53677cd45c912\/2022\/02\/16\/dcea0eae-86e4-40d6-92c7-1f25e2d9ee0d\/getty-hacker-hands-on-a-keyboard.jpg?auto=webp&amp;fit=crop&amp;height=675&amp;width=1200","contentUrl":"https:\/\/www.zdnet.com\/a\/img\/resize\/6b77a5fd197abe6efda06d9e56e53677cd45c912\/2022\/02\/16\/dcea0eae-86e4-40d6-92c7-1f25e2d9ee0d\/getty-hacker-hands-on-a-keyboard.jpg?auto=webp&amp;fit=crop&amp;height=675&amp;width=1200"},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/hackerone-employee-accessed-bug-reports-to-claim-extra-bounties\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"HackerOne employee accessed bug reports to claim extra bounties"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/47380","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=47380"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/47380\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=47380"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=47380"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=47380"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}