Exterro

On December 8, 2025, Exterro received an Indicator of Compromise (IOC) notification of a potential data issue with the Gainsight application. Exterro investigated the issue with guidance from the vendor. Exterro has reviewed the issue and has not seen any indication of compromise or unauthorized access to systems that hold customer data. As always, the security and integrity of our systems remain a top priority. We will continue monitoring potential threats and take necessary precautions to safeguard our operations. If you have any questions or concerns about this matter, please don't hesitate to contact us. Thank you for your attention to this update.

We would like to provide an update regarding the recently disclosed vulnerabilities, CVE-2024-50623 and CVE-2024-55956. After thorough review we are pleased to confirm that these vulnerabilities have no impact on Exterro, as our systems do not utilize the affected components. At Exterro, the security and integrity of our systems are of the utmost importance. We remain vigilant in monitoring emerging threats and are committed to implementing all necessary measures to ensure the safety of our operations. If you have any questions or require additional information, please feel free to contact us. Thank you for your continued trust and attention to this matter.

On June 2,2024, Snowflake indicated a recent increase in cyber threat activity targeting customer accounts on its cloud data platform. Snowflake issued a recommendation for users to query for unusual activity and conduct further analysis to prevent unauthorized user access. Exterro has reviewed the provided instructions. Exterro has not seen any indication of compromise or unauthorized access to systems that hold customer data. As always, the security and integrity of our systems remain a top priority. We will continue monitoring potential threats and take necessary precautions to safeguard our operations. If you have any questions or concerns about this matter, please don't hesitate to contact us. Thank you for your attention to this update.

We are providing a brief update regarding CVE-2024-3094, a recently discovered vulnerability. We are pleased to inform you that this vulnerability does not impact Exterro. After careful review and analysis, it has been determined that the vulnerability affects a higher version of XZUtils, which we do not utilize in our systems. Our current version is not susceptible to the identified issue. We want to assure you that the security and integrity of our systems remain a top priority. We will continue monitoring potential threats and take necessary precautions to safeguard our operations. If you have any questions or concerns about this matter, please don't hesitate to contact us. Thank you for your attention to this update.