Estee Lauder Data Leak, 440 Million Records Exposed

guest · Feb 11, 2020

Estee Lauder Data Leak, 440 Million Records Exposed
February 11, 2020
https://www.forbes.com/sites/daveyw...eak-440-million-records-exposed/#3e2c23142590

On January 30, security researcher Jeremiah Fowler discovered a database online that contained what he says was "a massive amount of records." That internet-facing database had no password protection in place, contained a total of 440,336,852 records, and was connected to the New York-based cosmetics giant, Estee Lauder.

"They were responsive and restricted public access the same day I notified them," Fowler says, adding, [...]
However, the entire database was accessible to anyone with an internet connection, so anyone could have potentially had access or stolen the data while it was unprotected, Fowler says. "Only a full cyber forensic investigation will determine who else gained access."

According to his report on the incident, Fowler discovered 440,336,852 logs and records that shouldn't have been publicly exposed, including user emails in plain text. As well as references to reports and other internal documents, Fowler said IP addresses, ports, pathways, and storage info that "cybercriminals could exploit to access deeper into the network," were also exposed.
Click to expand...

Security Discovery: Estee Lauder Exposed 440 Million Records Online

Log in or Sign up

Estee Lauder Data Leak, 440 Million Records Exposed

guest Guest

Log in or Sign up

Estee Lauder Data Leak, 440 Million Records Exposed

guest Guest

Useful Searches