Intel Employee Data Exposed: Four Portals, Bounty Gone

Intel employee data exposed: more than 270,000 worker names, managers, phones, and mailboxes reachable through forgotten internal web portals — not a CPU vulnerability. Sep 2026 reporting: Intel's paid Intigriti bug bounty marked suspended while intel.com still lists cash rewards. Corporate Breach traces Eaton Zveare's Intel Outside disclosure, four portal paths (business cards, hierarchy, ARK onboarding, SEIMS), the ghosted external.security.research inbox, and the Sep 2026 no-bounty replacement program — with DDRop kept separate from this PII story. Subscribe for more Corporate Breach investigations. Which corporate failure should we open the file on next? Comment below. 0:00 Cold open — 270k+ from business cards 0:28 Oct 14, 2024 first report 0:59 Chipmaker vs web debt 1:29 Four internet-facing portals 1:57 M-S-A-L bypass on card site 2:25 Directory from a card printer 2:51 ~1 GB JSON worker export 3:18 Hardcoded credentials in JavaScript 3:49 A-R-K pipeline / supplier metadata 4:19 SEIMS forged JWT typo 4:49 Mechanism flow — four doors 5:30 Fall 2024 email trail 6:44 Intel remediation statement 7:12 Second turn — four parallel paths 7:33 Aug 18, 2025 public write-up 8:03 Employee notice gap 8:26 Human stakes — vishing fuel 8:50 Bounty history — up to $100k silicon 9:22 Money climax — web out of scope 9:49 Third turn — Sep 2026 suspension 10:22 DDRop context (separate story) 10:50 Open questions 11:14 Security checklist 11:42 Outro / next file Sources: Eaton Zveare — Intel Outside — https://eaton-works.com/2025/08/18/in... The Register — Aug 20, 2025 — https://www.theregister.com/on-prem/2... SecurityWeek — Aug 20, 2025 — https://www.securityweek.com/intel-em... Tom's Hardware — Sep 19, 2026 — https://www.tomshardware.com/tech-ind... Hardware Busters — Sep 18, 2026 — https://hwbusters.com/news/the-intel-... Intel Bug Bounty Program — https://www.intel.com/content/www/us/... Counts and timelines follow researcher disclosure and trade press — not an Intel 8-K breach filing. No confirmation of malicious exfiltration before remediation. #IntelBugBounty #IntelEmployeeData #IntelOutside #CorporateBreach #Cybersecurity