WAYSCloud has published a retrospective Trust Center report concerning a historical supplier-related data incident involving Fortified Technologies AS.
The report documents an incident from November 2024 where WAYSCloud's monitoring detected manual, browser-based downloads of documents from a controlled collaboration workspace used in a cybersecurity-related supplier engagement. The workspace had been established as a security measure, with restricted access, authentication, centralised storage and logging.
The incident involved recruitment material for security-critical roles, including CISO and security architect candidates, as well as selected internal security and infrastructure-related material.
WAYSCloud reported the incident to the Norwegian Data Protection Authority under reference AR644275154, notified affected individuals, removed supplier access and strengthened controls for sensitive collaboration areas.
At the time, WAYSCloud publicly clarified the supplier identity to avoid speculation about other partners and suppliers. As CEO Knut Michael Haugland stated then, WAYSCloud considered openness and transparency important, particularly where uncertainty could affect uninvolved actors.
The full Trust Center report includes a timeline, redacted supporting documentation, regulatory correspondence, affected-person notification material, supplier verification requests and the closure notice from the Norwegian Data Protection Authority.
Read the full report:
https://trustcenter.wayscloud.eu/reports/WAYSCLOUD-TR-2025-0001/supplier-data-incident-fortified-technologies