E-commerce app 21 Buttons exposes millions of users’ data

guest · Dec 28, 2020

E-commerce app 21 Buttons exposes millions of users’ data
...exposing private data for 100s of influencers across Europe
December 28, 2020
https://securityaffairs.co/wordpress/112701/data-breach/button-21-data-leak.html

Researchers from cybersecurity firm vpnMentor discovered that the e-commerce app 21 Buttons was exposing private data for 100s of influencers across Europe.

21 Buttons allows users to shares photos of their outfits with links to the brands they’re wearing, then their followers can purchase their favorite clothes directly from the relevant brands using the app.
Click to expand...

21 Buttons with over 5 million downloads on Android happens to be one such social network that is primarily geared towards the fashion industry.
Fashion influencers can earn a commission for any purchases made via their profiles.

On 2 November 2020 vpnMentor experts discovered that the 21 Buttons app was using a misconfigured AWS bucket that has exposed the data of hundreds of influencers.

“The company was storing over 50 million pieces of data from the app on a misconfigured AWS cloud storage bucket. Buried amongst all this data, we discovered invoices for commissions paid by 21 Buttons to 100s of influencers all around Europe, based on the value of sales made through their profiles.” reads the report published by vpnMentor.
Click to expand...

vpnMentor: Report: Online Fashion App Exposes Financial Records of Top European Influencers

The vpnMentor research team discovered the breach in 21 Button’s data security as part of a huge web mapping project. Our researchers use port scanning to examine particular IP blocks and test different systems for weaknesses or vulnerabilities. They examine each weakness for any data being exposed.

Our team was able to access this S3 bucket because it was completely unsecured and unencrypted.
Click to expand...

Log in or Sign up

E-commerce app 21 Buttons exposes millions of users’ data

guest Guest

Log in or Sign up

E-commerce app 21 Buttons exposes millions of users’ data

guest Guest

Useful Searches