Education and Science Giant Elsevier Left Users’ Passwords Exposed Online

guest · Mar 18, 2019

Education and Science Giant Elsevier Left Users’ Passwords Exposed Online
Due a to a misconfigured server, a researcher found a constant stream of Elsevier users’ passwords
March 18, 2019
https://motherboard.vice.com/en_us/article/vbw8b9/elsevier-user-passwords-exposed-online

Elsevier, the company behind scientific journals such as The Lancet, left a server open to the public internet, exposing user email addresses and passwords. The impacted users include people from universities and educational institutions from across the world.

“Most users are .edu [educational institute] accounts, either students or teachers,” Mossab Hussein, chief security officer at cybersecurity company SpiderSilk who found the issue, told Motherboard in an online chat. “They could be using the same password for their emails, iCloud, etc.”

An Elsevier spokesperson told Motherboard in an emailed statement that "The issue has been remedied. We are still investigating how this happened, but it appears that a server was misconfigured due to human error. We have no indication that any data on the server has been misused [...]"
Click to expand...

Log in or Sign up

Education and Science Giant Elsevier Left Users’ Passwords Exposed Online

guest Guest

Log in or Sign up

Education and Science Giant Elsevier Left Users’ Passwords Exposed Online

guest Guest

Useful Searches