Security incident 2025.02: Final report

Dear Joachim von Watt,

We would like to thank you for your patience and understanding in connection with the recent security incident.

As you already know, unauthorized access data was copied. We can now inform you that we have successfully completed the necessary measures to rectify the vulnerabilities. Our system has undergone a comprehensive security review and we have proactively implemented additional security measures to prevent future incidents of this nature.

Measures implemented

In detail, we have taken the following steps:

• Addressing Vulnerabilities: The identified security gaps in the third-party system have been closed to ensure that no further unauthorized access is possible.
  
  
• Comprehensive Security Review: The entire system, including the infrastructure, has undergone a thorough security review to identify and address potential vulnerabilities.
  
  
• Proactive Security Measures: We have established additional security measures to continuously protect our system and ward off future threats.
  
  
• Enhanced Monitoring: Our monitoring system has been adjusted to detect and respond to unauthorized access more quickly.
  
  
• Optimized Incident Process: The entire incident process has been critically reviewed and optimized to respond more quickly and effectively in the event of a security incident.

Recommendations

If you have not yet changed your access data, we urge you to do so immediately. The following link will guide you step by step through the renewal process.

Since it could not be 100% ruled out that SMS dispatch data was also copied, customers who sent sensitive content such as access data for end customers before or during the security incident should renew this to be on the safe side.

Our engagement

The security of your data is our top priority. We are committed to continuously investing in the security of our systems and regularly scrutinizing our processes so that we can offer you a secure and reliable service. We apologize again for any inconvenience caused and thank you for your trust.

If you have any further questions, please do not hesitate to contact us directly.

With kind regards,

Till Christian Bannwart
Chief Information Security Officer
Member of the Executive Board

VADIAN.NET AG
Katharinengasse 10
9000 St. Gallen
Schweiz

Phone: +41 71 246 56 56
Email: keyaccounts@aspsms.com

Kundendienst
Ihr ASPSMS Support
Telefon: +41 71 246 56 56
Email: support@aspsms.com

Products based on the
ASPSMS system

Applications

• SMS Blaster Winlog
  https://www.aspsms.com/en/winlog/
  
  
• SMSBLASTER.COM web edition
  https://www.smsblaster.com/
  
  
• Microsoft Office Outlook 2013-2016
  Email to SMS
  
  
• Microsoft Office Outlook 2010
  ASPSMS + Outlook Mobile Service 2010
  
  
• Microsoft Office Outlook 2007
  ASPSMS + Outlook Mobile Service 2007
  
  
• SMSBLASTER for Windows
  https://www.aspsms.com/download/smsblaster
  
  
• SMS touch for iPhone and iPod touch
  https://www.aspsms.com/en/solutions/3rd-party/smstouch
  
  
• ASPSMS Widget for Mac (Beta)
  https://www.aspsms.com/en/solutions/3rd-party/aspsmswidgetmac
  
  
• ECO-SMS! Ecological SMS, first in Switzerland!
  https://www.aspsms.com/en/solutions/3rd-party/ecoSMS
  
  
• SMS AddOn for Microsoft Dynamics CRM
  https://www.aspsms.com/en/solutions/3rd-party/mscrmsms
  
  
• CRM- and Callcenter-Software AG-VIP SQL
  https://www.aspsms.com/en/solutions/3rd-party/agvipsql
  

• ASPSMS WebAPI
  https://webapi.aspsms.com/
  
  
• ASPSMS JSON API (REST)
  https://www.aspsms.com/en/json/
  
  
• ASPSMS Dot Net Assembly on NuGet
  https://www.nuget.org/packages/ASPSMS/
  
  
• ASPSMS SOAP Web Service
  https://www.aspsms.com/en/soap/
  
  
• ActiveX-Component (aspsms.dll)
  https://www.aspsms.com/en/dll/
  
  
• ASPTOKEN (OTP, Mobile TAN)
  https://www.aspsms.com/en/asptoken/description/
  
  
• XML interface
  https://www.aspsms.com/en/xml/
  
  
• SMTP interface
  https://www.aspsms.com/en/smtp/
  
  
• Simple HTTP request
  https://www.aspsms.com/en/http/
  
  
• Back channel international (without reverse billing):
  Global Two-Way SMS system
  https://www.aspsms.com/two-way
  
  
• 3rd Party PHP Class for the ASPSMS SOAP Web Service
  https://www.aspsms.com/en/solutions/3rd-party/indielab/
  
  

Credit Warning

• With this feature you can let yourself be informed by SMS and/or e-mail if your ASPSMS credit balance reaches or goes below a certain level: https://www.aspsms.com/en/creditwarning