Data Deposit Box Exposes PII of 270K Users

guest · Mar 26, 2020

Data Deposit Box Exposes PII of 270K Users
March 26, 2020
https://www.infosecurity-magazine.com/news/data-deposit-box-exposes-pi-of/

A company that provides secure cloud storage services has exposed over a quarter of a million private files uploaded by its customers.

Data Deposit Box left a database containing over 270,000 customer files on an unsecured Amazon S3 bucket. As a result of the breach, data including personally identifiable information (PII) belonging to Data Deposit Box customers was exposed.
The open bucket was discovered on Christmas Day, 2019, by a Vpnmentor research team led by cybersecurity analysts Noam Rotem and Ran Locar.

In a report on the breach published March 25, Vpnmentor researchers wrote: "In this case, we identified Data Deposit Box as the owner of the database. Before publishing this report, we reached out to the company to share our findings and provide guidance on how to resolve the issue."
Click to expand...

Researchers warned that the breach could have dire consequences.

"The unencrypted usernames and passwords exposed in this breach may allow malicious parties to access Data Deposit Box’s customers’ accounts," wrote researchers.
"We didn’t log into any users’ accounts for ethical reasons, but we could’ve easily done so. The bad news is that if we’re able to do this, hackers could do it too."
Click to expand...

vpnMentor: Report: Cloud Storage Data Breach Exposes Users’ Private Information

Log in or Sign up

Data Deposit Box Exposes PII of 270K Users

guest Guest

Log in or Sign up

Data Deposit Box Exposes PII of 270K Users

guest Guest

Useful Searches