Artwork Archive cloud storage misconfiguration exposed user data

guest · Jul 19, 2021

Artwork Archive cloud storage misconfiguration exposed user data
An unsecured bucket exposed information from Artwork Archive.
July 16, 2021
https://www.zdnet.com/article/artwo...figuration-exposed-user-data-revenue-records/

Update (July 16, 2021): Artwork Archive told ZDNet it received notice a month or so ago about a single open S3 bucket -- a folder where it keeps publicly shareable reports. It addressed it, and after a review by its team, it found no suspicious activity. Artwork Archive said it has also alerted users about this issue.

Artwork Archive told ZDNet that the company was made aware of the security issue on May 25 and acted "within the hour" to tackle the security issue. The storage system was secured on the same day.
Click to expand...

Researchers say a platform used to connect artists and potential buyers potentially exposed information belonging to users.
On Friday, the WizCase team, led by Ata Hakçıl, said that misconfigurations in an Amazon S3 bucket belonging to Artwork Archive exposed over 200 000 files.

The security researchers discovered the bucket, which did not require any authentication to access, in May.
Click to expand...

The co-founder of Artwork Archive, Justin Anthony, thanked WizCase for their report and told ZDNet that the misconfiguration was "anomalous" considering the company's stance on the security and privacy of its users.

Update (July 17, 2021): Added further commentary from Artwork Archive.
Click to expand...

WizCase: Thousands of Artists and Customers Exposed in Online Artwork Management Platform Data Breach

WizCase’s team of ethical hackers, led by Ata Hakçıl, has found a major breach in online art retail platform Artwork Archive. This breach compromised users’ names, surnames, email addresses, physical addresses, and other sensitive information.

Thousands of artists, collectors and their customers were left vulnerable. There was no need for a password or login credentials to access this information, and the data was not encrypted. The breach has since been secured.
Click to expand...

Our team of ethical cyber researchers discovered a misconfigured Amazon S3 bucket belonging to Artwork Archive containing over 200,000 files and 421 GB of data. The files were dated from August 2015 to the time of discovery.
Click to expand...

Log in or Sign up

Artwork Archive cloud storage misconfiguration exposed user data

guest Guest

Log in or Sign up

Artwork Archive cloud storage misconfiguration exposed user data

guest Guest

Useful Searches