MongoDB hosting company MongoHQ has suffered a breach of its systems on Monday, forcing it to go into lockdown to minimize the damage to users. The attackers reportedly gained access to the firm’s network through a compromised account on an internal employee support application.

MongoHQ promptly published a security notice in which it promised to audit all employee accounts, add two-factor authentication to its internal applications, and limit access via secure VPN connections. The company also said that it will implement more granular access control and have its apps checked for security flaws by a third party before bringing them back online.

The hackers got away with account information, email addresses and security credentials belonging to a number of notable customers, including application integration specialist CircleID and Buffer, SiliconANGLE’s social media scheduling app of choice. Users first became aware of the breach when spammers unleashed a flood of weight-loss links under their names.

Following MongoHQ’s example, Buffer quickly fixed the vulnerability affecting its service while keeping users informed through the entire process. The San Francisco-based company expired the OAuth access tokens that it believed were compromised and updated its API with a new security parameter.

Commenting on the incident, SiliconANGLE CyberSecurity Editor John Casaretto noted that partner risk is “one of the most understated elements in security” today. In order to keep hackers at bay, he continued, companies must tap their machine data for insights into suspicious network activity.

Over in the mobile space, enterprise file sharing provider Egnyte introduced new Android and iOS apps that allow users to securely share files without taking a detour through the cloud. The clients are fully integrated with its Storage Connect solution for remotely accessing data behind the corporate firewall.