ElasticSearch server exposed the personal data of over 57 million US citizens

guest · Nov 28, 2018

ElasticSearch server exposed the personal data of over 57 million US citizens
November 28, 2018
https://www.zdnet.com/article/elast...personal-data-of-over-57-million-us-citizens/

The researchers said the ElasticSearch server --a technology used for powering search functions-- was leaking over 73GB of data, and that several databases were cached inside the server's memory.

Inside one of these databases, Diachenko said he found 56,934,021 records holding the personal data of US citizens.
But the leaky ElasticSearch server also contained a second cached database named "Yellow Pages," which Diachenko said held an additional 25,917,820 records, which appeared to be business entries.

[...] based on clues contained within the leaked databases, he said today in a report that he believes that Canadian data firm Data & Leads might be connected to the data, directly or indirectly.
Click to expand...

guest · Nov 29, 2018

Sky Brasil exposes data of 32 million subscribers
The cause of the data leak was an Internet-accessible ElasticSearch server that was left without a password
November 29, 2018
https://www.zdnet.com/article/sky-brasil-exposes-data-of-32-million-subscribers/

As security experts predicted since last year, ElasticSearch servers --a technology for powering search functions-- are becoming the next big source of massive data leaks.

The latest company to be added to the list of breach incidents caused by an exposed ElasticSearch server is Sky Brasil, one of the biggest subscription television services in Brazil.
The researcher says that server stored logs and API data that belonged to Sky Brasil. He found 28.7GB of log files and a whopping 429.1GB of API data.

Castro said he discovered the server last week, and could not tell for how long was it available online before that. Castro also notified Sky Brasil about the leak last week.
Click to expand...

Log in or Sign up

ElasticSearch server exposed the personal data of over 57 million US citizens

guest Guest

guest Guest

Log in or Sign up

ElasticSearch server exposed the personal data of over 57 million US citizens

guest Guest

guest Guest

Useful Searches