Australian social news platform leaks 80,000 user records

guest · Oct 2, 2020

Australian social news platform leaks 80,000 user records
October 1, 2020
https://cybernews.com/security/australian-social-news-platform-leaks-80000-user-records/

The CyberNews investigations team discovered an exposed data bucket that belongs to Snewpit, an Australian news sharing platform. The unsecured bucket contains close to 80,000 user records, including usernames, full names, email addresses, and profile pictures.

The files that contain the records were stored on a publicly accessible Amazon Web Services (AWS) server, which means that anyone with a direct URL to the files could access and download the data that was left out in the open.
On September 24, the sensitive files in the Snewpit bucket were secured by the company and are no longer accessible.
Click to expand...

According to Snewpit founder Charlie Khoury, the bucket has been exposed for 5 weeks since the development team made server changes to the system reporting.

Fortunately, the files stored in the exposed Snewpit bucket don’t contain any deeply sensitive information like personal document scans, passwords, or social security numbers. However, even this data can be enough for bad actors to abuse for a variety of malicious purposes:
Click to expand...

Log in or Sign up

Australian social news platform leaks 80,000 user records

guest Guest

Log in or Sign up

Australian social news platform leaks 80,000 user records

guest Guest

Useful Searches